Provide references for further information: Can you share references or external links related to CVE-2006-1945?

{'name': '20496', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20496'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/awstats-65-vuln.html'}, {'name': '17621', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17621'}, {'name': 'GLSA-200606-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200606-06.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1945?


Explain the CVE ID: What does the identifier CVE-2006-1946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1946.

Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the keyval parameter in pbpgst.cgi, (2) the catsubno parameter in pblscg.cgi, and (3) the listno parameter in pblsmb.cgi.


Provide references for further information: Can you share references or external links related to CVE-2006-1946?

{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/visale-xss-vuln.html'}, {'name': '19655', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19655'}, {'name': '24716', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24716'}, {'name': 'ADV-2006-1408', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1408'}, {'name': '24717', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24717'}, {'name': 'visale-multiple-xss(25928)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25928'}, {'name': '17598', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17598'}, {'name': '24718', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24718'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1946?


Explain the CVE ID: What does the identifier CVE-2006-1947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1947.

Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) pagesize, (2) maxrec, and (3) startpos parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1947?

{'name': '19720', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19720'}, {'name': 'ADV-2006-1423', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1423'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/plexum-x5-sql-vuln.html'}, {'name': 'plexum-multiple-sql-injection(25918)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25918'}, {'name': '17617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17617'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1947?


Explain the CVE ID: What does the identifier CVE-2006-1948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1948.

The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do not properly store information in the Personal Address Book when multiple messages are checked and a message uses AltFrom, which might allow user-assisted remote attackers to trick a user into sending e-mail to an unauthorized recipient.


Provide references for further information: Can you share references or external links related to CVE-2006-1948?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21232945'}, {'name': '1015914', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1948?


Explain the CVE ID: What does the identifier CVE-2006-1949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1949.

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1949?

{'name': '18033', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18033'}, {'name': 'plexcartx3-catid-sql-injection(25917)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25917'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/plexcart-x3-sql-inj.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1949?


Explain the CVE ID: What does the identifier CVE-2006-1950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1950.

Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) aff and (2) cat parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1950?

{'name': 'bannerfarm-banners-xss(25919)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25919'}, {'name': '24728', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24728'}, {'name': 'ADV-2006-1410', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1410'}, {'name': '17613', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17613'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/bannerfarm-xss-vuln.html'}, {'name': '19718', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19718'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1950?


Explain the CVE ID: What does the identifier CVE-2006-1951 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1951.

Directory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote attackers to download arbitrary files via a crafted GET request including "....//" sequences, which are collapsed into "../" sequences by filtering.


Provide references for further information: Can you share references or external links related to CVE-2006-1951?

{'name': '17648', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17648'}, {'name': '20060421 Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431729/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0019.html'}, {'name': 'tftp-dotdotdotdot-directory-traversal(25969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25969'}, {'name': '20060421 Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0009.html'}, {'name': 'ADV-2006-1561', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1561'}, {'name': '19848', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19848'}, {'name': '778', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/778'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1951?


Explain the CVE ID: What does the identifier CVE-2006-1952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1952.

Directory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows remote attackers to read arbitrary files via "..." (triple dot) sequences in a GET request.


Provide references for further information: Can you share references or external links related to CVE-2006-1952?

{'name': 'ADV-2006-1562', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1562'}, {'name': '17718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17718'}, {'name': 'tftp-dotdotdot-directory-traversal(25971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25971'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0020.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.winagents.com/en/news/410.php'}, {'name': '19844', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19844'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1952?


Explain the CVE ID: What does the identifier CVE-2006-1953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1953.

Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" (encoded drive letter) in a URL.


Provide references for further information: Can you share references or external links related to CVE-2006-1953?

{'name': '18005', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/18005'}, {'name': '20060516 Caucho Resin Windows Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/434150/100/0/threaded'}, {'name': 'ADV-2006-1831', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1831'}, {'name': 'resin-webserver-directory-traversal(26478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26478'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0024.html'}, {'name': '1016109', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016109'}, {'name': '25570', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25570'}, {'name': '904', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/904'}, {'name': '20125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20125'}, {'name': '20060516 Caucho Resin Windows Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0026.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1953?


Explain the CVE ID: What does the identifier CVE-2006-1954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1954.

SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field.


Provide references for further information: Can you share references or external links related to CVE-2006-1954?

{'name': 'ADV-2006-1425', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1425'}, {'name': 'rechnungszentrale-authent-sql-injection(25911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25911'}, {'name': '20060419 RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.g-0.org/code/rz2-adv.html'}, {'name': '1699', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1699'}, {'name': '24752', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24752'}, {'name': '17588', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17588'}, {'name': '19728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19728'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1954?


Explain the CVE ID: What does the identifier CVE-2006-1955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1955.

PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1955?

{'name': 'ADV-2006-1425', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1425'}, {'name': '24753', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24753'}, {'name': '20060419 RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0384.html'}, {'name': '17589', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17589'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.g-0.org/code/rz2-adv.html'}, {'name': 'rechnungszentrale-authent-file-inclusion(25912)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25912'}, {'name': '1699', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1699'}, {'name': '19728', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19728'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1955?


Explain the CVE ID: What does the identifier CVE-2006-1956 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1956.

The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2006-1956?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-313.html'}, {'name': '20060418 [KAPDA::#41] - Mambo/Joomla rss component vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431317/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://irannetjob.com/content/view/209/28/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1956?


Explain the CVE ID: What does the identifier CVE-2006-1957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1957.

The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk consumption and possibly web-server outage) via multiple requests with different values of the feed parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1957?

{'name': '20060419 Re: [KAPDA::#41] - Mambo/Joomla rss component vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0380.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-313.html'}, {'name': '20060418 [KAPDA::#41] - Mambo/Joomla rss component vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431317/100/0/threaded'}, {'name': 'mambo-joomla-rss-dos(26131)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26131'}, {'tags': ['x_refsource_MISC'], 'url': 'http://irannetjob.com/content/view/209/28/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1957?


Explain the CVE ID: What does the identifier CVE-2006-1958 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1958.

Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via (1) the forumreferrer cookie to register.php and (2) the messages parameter in message_list.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1958?

{'name': '739', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/739'}, {'name': 'wwwthreads-multiple-sql-injection(25936)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25936'}, {'name': 'ADV-2006-1447', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1447'}, {'name': '17615', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17615'}, {'name': '19732', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19732'}, {'name': '20060419 WWWThread RC 3 MultBugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431400/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1958?


Explain the CVE ID: What does the identifier CVE-2006-1959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1959.

PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1959?

{'name': 'actualanalyzer-direct-file-include(25893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25893'}, {'name': '19743', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19743'}, {'name': '1015967', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015967'}, {'name': 'ADV-2006-1430', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1430'}, {'name': '742', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/742'}, {'name': '17597', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17597'}, {'name': '24778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24778'}, {'name': '20060419 [MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431351/100/0/threaded'}, {'name': '20060520 ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/434562/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1959?


Explain the CVE ID: What does the identifier CVE-2006-1960 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1960.

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.


Provide references for further information: Can you share references or external links related to CVE-2006-1960?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.assurance.com.au/advisories/200604-cisco.txt'}, {'name': '17604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17604'}, {'name': '20060419 Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431371/30/5490/threaded'}, {'name': '19736', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19736'}, {'name': '20060419 Re: Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431367/30/5490/threaded'}, {'name': 'ADV-2006-1434', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1434'}, {'name': '20060419 Multiple Vulnerabilities in the WLSE Appliance', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml'}, {'name': '1015965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015965'}, {'name': '24812', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24812'}, {'name': 'cisco-wlse-user-xss(25883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25883'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1960?


Explain the CVE ID: What does the identifier CVE-2006-1961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1961.

Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and User Registration Tool (URT) before 20060419, and all versions of Ethernet Subscriber Solution Engine (ESSE) and CiscoWorks2000 Service Management Solution (SMS) allow local users to gain Linux shell access via shell metacharacters in arguments to the "show" command in the application's command line interface (CLI), aka bug ID CSCsd21502 (WLSE), CSCsd22861 (URT), and CSCsd22859 (HSE).  NOTE: other issues might be addressed by the Cisco advisory.


Provide references for further information: Can you share references or external links related to CVE-2006-1961?

{'name': '24813', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24813'}, {'name': 'ADV-2006-1435', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1435'}, {'name': '17609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17609'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.assurance.com.au/advisories/200604-cisco.txt'}, {'name': 'cisco-wlse-shell-privilege-escalation(25884)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25884'}, {'name': '20060419 Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431371/30/5490/threaded'}, {'name': '19736', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19736'}, {'name': '20060419 Re: Multiple vulnerabilities in Linux based Cisco products', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431367/30/5490/threaded'}, {'name': '19739', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19739'}, {'name': 'ADV-2006-1434', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1434'}, {'name': '20060419 Multiple Vulnerabilities in the WLSE Appliance', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060419-wlse.shtml'}, {'name': '19741', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19741'}, {'name': '20060419 Response to Privilege Escalation on Multiple Cisco Products', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sr-20060419-priv.shtml'}, {'name': '1015965', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015965'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1961?


Explain the CVE ID: What does the identifier CVE-2006-1962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1962.

SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (login parameter) to main.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1962?

{'name': 'pcpin-chat-main-sql-injection(25961)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25961'}, {'name': '20060604 Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/436029/100/0/threaded'}, {'name': 'ADV-2006-1441', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1441'}, {'name': '1015968', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015968'}, {'name': '20060419 PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431390/100/0/threaded'}, {'name': '17632', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17632'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/pcpin_504_xpl.html'}, {'name': '19708', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19708'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1962?


Explain the CVE ID: What does the identifier CVE-2006-1963 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1963.

Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." (dot dot) in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code.


Provide references for further information: Can you share references or external links related to CVE-2006-1963?

{'name': '20060604 Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/436029/100/0/threaded'}, {'name': 'ADV-2006-1441', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1441'}, {'name': '1015968', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015968'}, {'name': '20060419 PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431390/100/0/threaded'}, {'name': '17632', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17632'}, {'name': 'pcpin-chat-main-file-include(25962)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25962'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/pcpin_504_xpl.html'}, {'name': '19708', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19708'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1963?


Explain the CVE ID: What does the identifier CVE-2006-1964 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1964.

SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1964?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?getxpl=23'}, {'name': '17616', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17616'}, {'name': '19693', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19693'}, {'name': 'aspsitem-haberler-sql-injection(25932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25932'}, {'name': 'ADV-2006-1439', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1439'}, {'name': '20060419 ASPSitem <= 1.83 Remote SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431469/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1964?


Explain the CVE ID: What does the identifier CVE-2006-1965 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1965.

Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) onuser, (2) pass, (3) chatsys, (4) room, (5) username, and (6) to parameters in (a) sendim.cgi; the (7) username parameter in (b) imessage.cgi; the (8) password parameter in (c) login.cgi; and the (9) cat_id parameter in (d) viewcat.cgi.


Provide references for further information: Can you share references or external links related to CVE-2006-1965?

{'name': '24757', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24757'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/net-clubs-pro-xss-vuln.html'}, {'name': '24754', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24754'}, {'name': 'ADV-2006-1436', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1436'}, {'name': '17622', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17622'}, {'name': 'netclubspro-multiple-xss(25957)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25957'}, {'name': '24755', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24755'}, {'name': '24756', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24756'}, {'name': '19651', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19651'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1965?


Explain the CVE ID: What does the identifier CVE-2006-1966 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1966.

An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a "small synflood" to the SMTP port (TCP port 25), as demonstrated by a 10-microsecond wait between sending packets.  NOTE: this issue has been disputed in followup posts that suggest that a protection feature is triggering a RST.


Provide references for further information: Can you share references or external links related to CVE-2006-1966?

{'name': '20060416 Fortinet28 box does not resist has small synflood!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431404/100/0/threaded'}, {'name': '20060418 Re: Fortinet28 box does not resist has small synflood!', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0449.html'}, {'name': '20060418 Re: Fortinet28 box does not resist has small synflood!', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0472.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1966?


Explain the CVE ID: What does the identifier CVE-2006-1967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1967.

Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1967?

{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '503', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/503'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'name': '24761', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24761'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1967?


Explain the CVE ID: What does the identifier CVE-2006-1968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1968.

Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the sort_order parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1968?

{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'name': '24762', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24762'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1968?


Explain the CVE ID: What does the identifier CVE-2006-1969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1969.

Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engine or Site Search, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the q parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1969?

{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '24763', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24763'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1969?


Explain the CVE ID: What does the identifier CVE-2006-1970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1970.

Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1970?

{'name': 'portalpack-multiple-xss(25940)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25940'}, {'name': 'ADV-2006-1440', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1440'}, {'name': '24764', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24764'}, {'name': '19695', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19695'}, {'name': '17628', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17628'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/portal-pack-6-xss-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1970?


Explain the CVE ID: What does the identifier CVE-2006-1971 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1971.

Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitrary web script or HTML via the action parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1971?

{'name': '779', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/779'}, {'name': '24768', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24768'}, {'name': 'ADV-2006-1438', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1438'}, {'name': '20060419 ContentBoxx Login.php Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431386/100/0/threaded'}, {'name': '19733', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19733'}, {'name': '17612', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17612'}, {'name': '740', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/740'}, {'name': 'contentboxx-login-xss(25952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25952'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1971?


Explain the CVE ID: What does the identifier CVE-2006-1972 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1972.

Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject arbitrary web script or HTML via the ordner parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1972?

{'name': '20060419 EasyGallery Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431430/100/0/threaded'}, {'name': '19713', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19713'}, {'name': 'easygallery-script-xss(25943)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25943'}, {'tags': ['x_refsource_MISC'], 'url': 'http://advisory.patriotichackers.com/index.php?itemid=5'}, {'name': 'ADV-2006-1437', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1437'}, {'name': '17624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17624'}, {'name': '746', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/746'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1972?


Explain the CVE ID: What does the identifier CVE-2006-1973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1973.

Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol (SIP) messages.


Provide references for further information: Can you share references or external links related to CVE-2006-1973?

{'name': '17631', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17631'}, {'name': 'linksys-rt31p2-sip-dos(25915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25915'}, {'name': 'ADV-2006-1443', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1443'}, {'name': '24810', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24810'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kb.cert.org/vuls/id/MIMG-6GMMW4'}, {'name': '19722', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19722'}, {'name': 'VU#621566', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/621566'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1973?


Explain the CVE ID: What does the identifier CVE-2006-1974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1974.

SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1974?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/bid/16443/exploit'}, {'name': '16443', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16443'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1974?


Explain the CVE ID: What does the identifier CVE-2006-1975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1975.

Cross-site scripting (XSS) vulnerability in guestbook_newentry.php in PHP-Gastebuch 1.61 allows remote attackers to inject arbitrary web script or HTML via the Kommentar field.


Provide references for further information: Can you share references or external links related to CVE-2006-1975?

{'name': '19810', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19810'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/23/23962-gastebuch.txt'}, {'name': '23962', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23962'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1975?


Explain the CVE ID: What does the identifier CVE-2006-1976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1976.

Cross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field.


Provide references for further information: Can you share references or external links related to CVE-2006-1976?

{'name': '23958', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23958'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/23/23958-prb.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1976?


Explain the CVE ID: What does the identifier CVE-2006-1977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1977.

Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1977?

{'name': 'ADV-2006-1393', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1393'}, {'name': '777', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/777'}, {'name': '20060415 FlexBB <= 0.5.7 BETA XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431071/100/0/threaded'}, {'name': '1015946', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015946'}, {'name': 'flexbb-newthread-xss(25868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25868'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1977?


Explain the CVE ID: What does the identifier CVE-2006-1978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1978.

SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1978?

{'name': '1015949', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015949'}, {'name': '20060417 FlexBB 0.5.5 Bypass Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431156/100/0/threaded'}, {'name': '17568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17568'}, {'name': '1686', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1978?


Explain the CVE ID: What does the identifier CVE-2006-1979 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1979.

Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1979?

{'name': '747', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/747'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/122/summary.html'}, {'name': 'mwguest-mwguest-xss(25674)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25674'}, {'name': '20060420 [eVuln] MWGuest XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431507/100/0/threaded'}, {'name': '17630', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17630'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1979?


Explain the CVE ID: What does the identifier CVE-2006-1980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1980.

Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1980?

{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/w2b-online-banking-vuln.html'}, {'name': 'ADV-2006-1445', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1445'}, {'name': '24759', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24759'}, {'name': '19717', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19717'}, {'name': 'w2bonlinebanking-sid-xss(25947)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25947'}, {'name': '17626', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17626'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1980?


Explain the CVE ID: What does the identifier CVE-2006-1981 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1981.

Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen.


Provide references for further information: Can you share references or external links related to CVE-2006-1981?

{'name': 'macosx-java-inputmethods-info-disclosure(26167)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26167'}, {'name': 'ADV-2006-1398', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1398'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303658'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1981?


Explain the CVE ID: What does the identifier CVE-2006-1982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1982.

Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use ImageIO or AppKit, allows remote attackers to execute arbitrary code via crafted TIFF images.


Provide references for further information: Can you share references or external links related to CVE-2006-1982?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://docs.info.apple.com/article.html?artnum=303411'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x24-advisory.php'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '31837', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/31837'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1982?


Explain the CVE ID: What does the identifier CVE-2006-1983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1983.

Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) PredictorVSetField function for TIFF or (2) CFAllocatorAllocate function for GIF, as used in applications that use ImageIO or AppKit.  NOTE: the BMP vector has been re-assigned to CVE-2006-2238 because it affects a separate product family.


Provide references for further information: Can you share references or external links related to CVE-2006-1983?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'name': '1016067', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016067'}, {'name': '24821', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24821'}, {'name': 'macosx-cfallocatorallocate-bo(25949)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25949'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'macosx-predictorvsetfield-bo(25951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25951'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '24822', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24822'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x28-advisory.php'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x30-advisory.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1983?


Explain the CVE ID: What does the identifier CVE-2006-1984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1984.

Unspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that use ImageIO or AppKit, allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2006-1984?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x29-advisory.php'}, {'name': 'macosx-tiffsetfield-bo(25950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25950'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1984?


Explain the CVE ID: What does the identifier CVE-2006-1985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1985.

Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows user-assisted attackers to execute arbitrary code via a crafted archive (such as ZIP) that contains long path names, which triggers an error in the BOMStackPop function.


Provide references for further information: Can you share references or external links related to CVE-2006-1985?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': '24819', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24819'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x25-advisory.php'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/modules.php?name=News&file=article&sid=3233'}, {'name': '1016082', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016082'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'macosx-archivehelper-bo(25945)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25945'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1985?


Explain the CVE ID: What does the identifier CVE-2006-1986 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1986.

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACING attribute in a TABLE tag, which triggers an error in KWQListIteratorImpl::KWQListIteratorImpl.


Provide references for further information: Can you share references or external links related to CVE-2006-1986?

{'tags': ['x_refsource_MISC'], 'url': 'http://security-protocols.com/poc/sp-x26-1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x26-advisory.php'}, {'name': 'macosx-safari-dos(25946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25946'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '24823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24823'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1986?


Explain the CVE ID: What does the identifier CVE-2006-1987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1987.

Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME tag, possibly due to (1) multiple SCROLLING attributes with no values, or (2) a SRC attribute with no value.  NOTE: due to lack of diagnosis by the researcher, it is unclear which vector is responsible.


Provide references for further information: Can you share references or external links related to CVE-2006-1987?

{'tags': ['x_refsource_MISC'], 'url': 'http://security-protocols.com/poc/sp-x26-4.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x26-advisory.php'}, {'name': 'macosx-safari-dos(25946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25946'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1987?


Explain the CVE ID: What does the identifier CVE-2006-1988 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1988.

The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service (application crash) via an HTML LI tag with a large VALUE attribute (list item number), which triggers a null dereference in QPainter::drawText, probably due to a failed memory allocation that uses the VALUE.


Provide references for further information: Can you share references or external links related to CVE-2006-1988?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.security-protocols.com/sp-x26-advisory.php'}, {'name': 'macosx-safari-dos(25946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25946'}, {'name': 'ADV-2006-1452', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1452'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security-protocols.com/poc/sp-x26-2.html'}, {'name': '17634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17634'}, {'name': '24823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24823'}, {'name': '19686', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19686'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1988?


Explain the CVE ID: What does the identifier CVE-2006-1989 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1989.

Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remote web servers to execute arbitrary code via long HTTP headers.


Provide references for further information: Can you share references or external links related to CVE-2006-1989?

{'name': 'APPLE-SA-2006-06-27', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html'}, {'name': '20159', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20159'}, {'name': 'MDKSA-2006:080', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:080'}, {'name': 'VU#599220', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/599220'}, {'name': '19963', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19963'}, {'name': 'ADV-2006-1586', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1586'}, {'name': 'clamav-freshclam-http-bo(26182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26182'}, {'name': '1016392', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016392'}, {'name': '19964', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19964'}, {'name': '2006-0024', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0024'}, {'name': '19912', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19912'}, {'name': 'SUSE-SA:2006:025', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_05_05.html'}, {'name': '19880', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19880'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.clamav.net/security/0.88.2.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kolab.org/security/kolab-vendor-notice-09.txt'}, {'name': '25120', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25120'}, {'name': 'SUSE-SR:2006:010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html'}, {'name': '20117', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20117'}, {'name': 'DSA-1050', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1050'}, {'name': 'GLSA-200605-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml'}, {'name': '20877', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20877'}, {'name': 'ADV-2006-2566', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2566'}, {'name': '17754', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17754'}, {'name': '19874', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19874'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1989?


Explain the CVE ID: What does the identifier CVE-2006-1990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1990.

Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396.


Provide references for further information: Can you share references or external links related to CVE-2006-1990?

{'name': 'ADV-2006-4750', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/4750'}, {'name': '21723', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21723'}, {'name': 'php-wordwrap-string-bo(26001)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26001'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-683'}, {'name': '21252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21252'}, {'name': '1015979', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015979'}, {'name': '20222', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20222'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=304829'}, {'name': 'TLSA-2006-38', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/2006/TLSA-2006-38.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm'}, {'name': '21050', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21050'}, {'name': 'SUSE-SA:2006:031', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_31_php.html'}, {'name': 'MDKSA-2006:091', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:091'}, {'name': 'GLSA-200605-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200605-08.xml'}, {'name': '20269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20269'}, {'name': 'RHSA-2006:0568', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0568.html'}, {'name': '21135', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21135'}, {'name': '20676', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20676'}, {'name': 'USN-320-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-320-1'}, {'name': 'oval:org.mitre.oval:def:9696', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9696'}, {'name': '19803', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19803'}, {'name': '20061005 rPSA-2006-0182-1 php php-mysql php-pgsql', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/447866/100/0/threaded'}, {'name': 'RHSA-2006:0501', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0501.html'}, {'name': '23155', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23155'}, {'name': 'RHSA-2006:0549', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2006-0549.html'}, {'name': '22225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22225'}, {'name': 'MDKSA-2006:122', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:122'}, {'name': '21125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21125'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02'}, {'name': 'APPLE-SA-2006-11-28', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html'}, {'name': 'ADV-2006-1500', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1500'}, {'name': 'TA06-333A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-333A.html'}, {'name': '21031', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21031'}, {'name': '20052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20052'}, {'name': '21564', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21564'}, {'name': '20060701-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1990?


Explain the CVE ID: What does the identifier CVE-2006-1991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1991.

The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument.


Provide references for further information: Can you share references or external links related to CVE-2006-1991?

{'name': '1015979', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015979'}, {'name': 'php-substrcompare-length-dos(26003)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26003'}, {'name': 'SUSE-SA:2006:031', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_31_php.html'}, {'name': 'MDKSA-2006:091', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:091'}, {'name': 'GLSA-200605-08', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200605-08.xml'}, {'name': '20269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20269'}, {'name': '20676', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20676'}, {'name': 'USN-320-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-320-1'}, {'name': '21125', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21125'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02'}, {'name': 'ADV-2006-1500', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1500'}, {'name': '20052', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20052'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1991?


Explain the CVE ID: What does the identifier CVE-2006-1992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1992.

mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences.  NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable.


Provide references for further information: Can you share references or external links related to CVE-2006-1992?

{'name': '20060423 MSIE (mshtml.dll) OBJECT tag vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045422.html'}, {'name': '781', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/781'}, {'name': '1016001', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016001'}, {'name': '1016291', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016291'}, {'name': '20060422 MSIE (mshtml.dll) OBJECT tag vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431796/100/0/threaded'}, {'name': '27475', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27475'}, {'name': '20060422 Re: MSIE (mshtml.dll) OBJECT tag vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0616.html'}, {'name': 'ADV-2006-1507', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1507'}, {'name': 'MS06-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021'}, {'name': '19762', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19762'}, {'name': 'ie-object-memory-corruption(25978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25978'}, {'name': '17658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17658'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1992?


Explain the CVE ID: What does the identifier CVE-2006-1993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1993.

Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller context object.  NOTE: this was originally claimed to be a buffer overflow in (1) js320.dll and (2) xpcom_core.dll, but the vendor disputes this claim.


Provide references for further information: Can you share references or external links related to CVE-2006-1993?

{'name': '20214', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20214'}, {'name': '19802', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19802'}, {'name': 'ADV-2006-3748', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3748'}, {'name': 'oval:org.mitre.oval:def:1790', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1790'}, {'name': 'SSRT061145', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/434524/100/0/threaded'}, {'name': '20019', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20019'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securident.com/vuln/ff.txt'}, {'name': '17671', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17671'}, {'name': 'GLSA-200605-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200605-06.xml'}, {'name': 'firefox-iframe-contentwindowfocus-bo(25994)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25994'}, {'name': 'ADV-2006-1922', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1922'}, {'name': 'HPSBTU02118', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/434524/100/0/threaded'}, {'name': 'DSA-1055', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1055'}, {'name': 'VU#866300', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/866300'}, {'name': '20015', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20015'}, {'name': '1015981', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015981'}, {'name': 'ADV-2008-0083', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0083'}, {'name': 'ADV-2006-1614', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1614'}, {'name': 'SSRT061181', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/446658/100/200/threaded'}, {'name': '20060424 Firefox Remote Code Execution and DoS 1.5.0.2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431878/100/0/threaded'}, {'name': 'HPSBUX02153', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/446658/100/200/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mozilla.org/security/announce/2006/mfsa2006-30.html'}, {'name': '22066', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22066'}, {'name': '20070', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20070'}, {'name': 'DSA-1053', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1053'}, {'name': '780', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/780'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1993?


Explain the CVE ID: What does the identifier CVE-2006-1994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1994.

PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1994?

{'name': 'ADV-2006-1482', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1482'}, {'name': '20060421 dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431758'}, {'name': '19788', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19788'}, {'name': '20060421 dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045369.html'}, {'name': 'dforum-dforumpath-parameter-file-include(26035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26035'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?viewdoc=27'}, {'name': '17650', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17650'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1994?


Explain the CVE ID: What does the identifier CVE-2006-1995 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1995.

Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order.


Provide references for further information: Can you share references or external links related to CVE-2006-1995?

{'name': '17668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17668'}, {'name': 'ADV-2006-1490', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1490'}, {'name': '17649', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17649'}, {'name': '24889', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24889'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/17649-directory-traversal.exploit'}, {'name': '784', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/784'}, {'name': 'scry-gallery-index-directory-traversal(25991)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25991'}, {'name': '20060425 Interesting Scry stuff', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-April/000716.html'}, {'name': '20060421 Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431716/100/0/threaded'}, {'name': '19777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19777'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1995?


Explain the CVE ID: What does the identifier CVE-2006-1996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1996.

Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2006-1996?

{'name': '17668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17668'}, {'name': 'ADV-2006-1490', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1490'}, {'name': 'scry-gallery-index-path-disclosure(25990)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25990'}, {'name': '784', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/784'}, {'name': '20060425 Interesting Scry stuff', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-April/000716.html'}, {'name': '20060421 Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431716/100/0/threaded'}, {'name': '19777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19777'}, {'name': '24890', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24890'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1996?


Explain the CVE ID: What does the identifier CVE-2006-1997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1997.

Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1997?

{'name': 'ADV-2006-1477', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1477'}, {'name': '17677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17677'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sybase.com/detail?id=1040213'}, {'name': '19784', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19784'}, {'name': 'pylon-groupware-unauth-access(25989)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25989'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1997?


Explain the CVE ID: What does the identifier CVE-2006-1998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1998.

OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error number, which triggers an error.


Provide references for further information: Can you share references or external links related to CVE-2006-1998?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/openttdx-adv.txt'}, {'name': 'ADV-2006-1480', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1480'}, {'name': '19768', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19768'}, {'name': 'openttd-command-packet-dos(26000)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26000'}, {'name': 'GLSA-200609-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200609-03.xml'}, {'name': '21799', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21799'}, {'name': '17661', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17661'}, {'name': '20060423 Denial of service bugs in OpenTTD 0.4.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431871/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1998?


Explain the CVE ID: What does the identifier CVE-2006-1999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1999.

The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu.


Provide references for further information: Can you share references or external links related to CVE-2006-1999?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/openttdx-adv.txt'}, {'name': 'ADV-2006-1480', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1480'}, {'name': '19768', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19768'}, {'name': 'GLSA-200609-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200609-03.xml'}, {'name': '21799', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21799'}, {'name': '17661', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17661'}, {'name': '20060423 Denial of service bugs in OpenTTD 0.4.7', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431871/100/0/threaded'}, {'name': 'openttd-udp-packet-dos(26004)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26004'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1999?


Explain the CVE ID: What does the identifier CVE-2007-0001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0001.

The file watch implementation in the audit subsystem (auditctl -w) in the Red Hat Enterprise Linux (RHEL) 4 kernel 2.6.9 allows local users to cause a denial of service (kernel panic) by replacing a watched file, which does not cause the watch on the old inode to be dropped.


Provide references for further information: Can you share references or external links related to CVE-2007-0001?

{'name': '33031', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33031'}, {'name': 'oval:org.mitre.oval:def:9560', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9560'}, {'name': '24300', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24300'}, {'name': 'RHSA-2007:0085', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0085.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=223129'}, {'name': '1017705', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017705'}, {'name': '22737', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22737'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-0001?


Explain the CVE ID: What does the identifier CVE-2007-0002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-0002.

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0.8.9 allow user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not properly handled in the (1) WP3TablesGroup::_readContents and (2) WP5DefinitionGroup_DefineTablesSubGroup::WP5DefinitionGroup_DefineTablesSubGroup functions.  NOTE: the integer overflow has been split into CVE-2007-1466.