Provide references for further information: Can you share references or external links related to CVE-2006-0386?

{'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '23642', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23642'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html'}, {'name': 'macosx-filevault-file-access(25024)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25024'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0386?


Explain the CVE ID: What does the identifier CVE-2006-0387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0387.

Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers to execute arbitrary code via unspecified vectors involving a web page with crafted JavaScript, a different vulnerability than CVE-2005-4504.


Provide references for further information: Can you share references or external links related to CVE-2006-0387?

{'name': 'VU#176732', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/176732'}, {'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': '1015713', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015713'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'name': 'macosx-safari-bo(25032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25032'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0387?


Explain the CVE ID: What does the identifier CVE-2006-0388 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0388.

Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.


Provide references for further information: Can you share references or external links related to CVE-2006-0388?

{'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': '1015713', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015713'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'name': 'macosx-safari-http-redirect(25038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25038'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0388?


Explain the CVE ID: What does the identifier CVE-2006-0389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0389.

Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds.


Provide references for further information: Can you share references or external links related to CVE-2006-0389?

{'name': 'macosx-syndication-xss(25040)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25040'}, {'name': '23649', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23649'}, {'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0389?


Explain the CVE ID: What does the identifier CVE-2006-0390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0390.


Provide references for further information: Can you share references or external links related to CVE-2006-0390?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0390?


Explain the CVE ID: What does the identifier CVE-2006-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0391.

Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper.


Provide references for further information: Can you share references or external links related to CVE-2006-0391?

{'name': '23641', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23641'}, {'name': 'macosx-bom-directory-traversal(25023)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25023'}, {'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '20060302 Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/intelligence/vulnerabilities/display.php?id=399'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0391?


Explain the CVE ID: What does the identifier CVE-2006-0392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0392.

Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Canon RAW image.


Provide references for further information: Can you share references or external links related to CVE-2006-0392?

{'name': 'APPLE-SA-2006-08-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html'}, {'name': 'ADV-2006-3101', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3101'}, {'name': '21253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21253'}, {'name': 'VU#527236', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/527236'}, {'name': '19289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19289'}, {'name': 'TA06-214A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-214A.html'}, {'name': 'macosx-raw-image-bo(28142)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/28142'}, {'name': '27739', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27739'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0392?


Explain the CVE ID: What does the identifier CVE-2006-0393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0393.

OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang.


Provide references for further information: Can you share references or external links related to CVE-2006-0393?

{'name': 'APPLE-SA-2006-08-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html'}, {'name': '27745', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27745'}, {'name': 'ADV-2006-3101', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3101'}, {'name': '21253', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21253'}, {'name': '19289', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19289'}, {'name': 'TA06-214A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-214A.html'}, {'name': '1016672', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016672'}, {'name': 'macosx-openssh-nonexistent-user-dos(28147)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/28147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0393?


Explain the CVE ID: What does the identifier CVE-2006-0394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0394.


Provide references for further information: Can you share references or external links related to CVE-2006-0394?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0394?


Explain the CVE ID: What does the identifier CVE-2006-0395 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0395.

The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types.


Provide references for further information: Can you share references or external links related to CVE-2006-0395?

{'name': 'macosx-mail-bypass-security(25027)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25027'}, {'name': '23645', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23645'}, {'name': '19064', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19064'}, {'name': '16907', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16907'}, {'name': 'ADV-2006-0791', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0791'}, {'name': 'APPLE-SA-2006-03-01', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/client-management/2006/Mar/msg00030.html'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0395?


Explain the CVE ID: What does the identifier CVE-2006-0396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0396.

Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment.


Provide references for further information: Can you share references or external links related to CVE-2006-0396?

{'name': '17081', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17081'}, {'name': '23872', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23872'}, {'name': 'ADV-2006-0949', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0949'}, {'name': '1015762', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015762'}, {'name': 'VU#980084', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/980084'}, {'name': 'macosx-mail-attachment-bo(25209)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25209'}, {'name': '19129', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19129'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitalmunition.com/DMA%5B2006-0313a%5D.txt'}, {'name': 'APPLE-SA-2006-03-13', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303453'}, {'name': "20060314 DMA[2006-0313a] - 'Apple OSX Mail.app RFC1740 Real Name Buffer Overflow'", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427601/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0396?


Explain the CVE ID: What does the identifier CVE-2006-0397 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0397.

Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different.


Provide references for further information: Can you share references or external links related to CVE-2006-0397?

{'name': '23869', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23869'}, {'name': 'ADV-2006-0949', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0949'}, {'name': '1015760', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015760'}, {'name': '19129', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19129'}, {'name': 'APPLE-SA-2006-03-13', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html'}, {'name': 'macosx-safefiletype-command-execution(25269)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25269'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0397?


Explain the CVE ID: What does the identifier CVE-2006-0398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0398.


Provide references for further information: Can you share references or external links related to CVE-2006-0398?

{'name': 'ADV-2006-0949', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0949'}, {'name': '1015760', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015760'}, {'name': '19129', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19129'}, {'name': 'APPLE-SA-2006-03-13', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html'}, {'name': 'macosx-safefiletype-command-execution(25269)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25269'}, {'name': '23870', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23870'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0398?


Explain the CVE ID: What does the identifier CVE-2006-0399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0399.


Provide references for further information: Can you share references or external links related to CVE-2006-0399?

{'name': 'ADV-2006-0949', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0949'}, {'name': '23871', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23871'}, {'name': '1015760', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015760'}, {'name': '19129', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19129'}, {'name': 'APPLE-SA-2006-03-13', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html'}, {'name': 'macosx-safefiletype-command-execution(25269)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25269'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0399?


Explain the CVE ID: What does the identifier CVE-2006-0400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0400.

CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving "crafted archives."


Provide references for further information: Can you share references or external links related to CVE-2006-0400?

{'name': '1015763', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015763'}, {'name': 'ADV-2006-0949', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0949'}, {'name': '19129', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19129'}, {'name': 'APPLE-SA-2006-03-13', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html'}, {'name': 'macosx-sameorigin-policy-bypass(25208)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25208'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303453'}, {'name': '23873', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23873'}, {'name': '17082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17082'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0400?


Explain the CVE ID: What does the identifier CVE-2006-0401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0401.

Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0401?

{'name': 'ADV-2006-1215', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1215'}, {'name': 'macosx-firmware-password-bypass(25620)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25620'}, {'name': '24399', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24399'}, {'name': '1015859', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015859'}, {'name': '17364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17364'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303567'}, {'name': '19462', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19462'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0401?


Explain the CVE ID: What does the identifier CVE-2006-0402 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0402.

SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands.


Provide references for further information: Can you share references or external links related to CVE-2006-0402?

{'name': '22743', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22743'}, {'name': '18563', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18563'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=387320'}, {'name': '19153', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19153'}, {'name': '16347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16347'}, {'name': 'ADV-2006-0297', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0297'}, {'name': 'zoph-sql-injection(24264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24264'}, {'name': 'DSA-989', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-989'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0402?


Explain the CVE ID: What does the identifier CVE-2006-0403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0403.

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect.


Provide references for further information: Can you share references or external links related to CVE-2006-0403?

{'name': '16344', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16344'}, {'name': '22701', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22701'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/43/summary.html'}, {'name': '22700', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22700'}, {'name': 'emoblog-index-sql-injection(24245)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24245'}, {'name': '370', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/370'}, {'name': '1015524', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015524'}, {'name': '20060125 The parameter in e-moBLOG is "monthy" [sic]', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-January/000511.html'}, {'name': '18567', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18567'}, {'name': 'ADV-2006-0296', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0296'}, {'name': '20060122 [eVuln] e-moBLOG SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422938/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0403?


Explain the CVE ID: What does the identifier CVE-2006-0404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0404.

Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords.


Provide references for further information: Can you share references or external links related to CVE-2006-0404?

{'name': 'ADV-2006-0299', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0299'}, {'name': '20060122 [eVuln] Note-A-Day Weblog Sensitive Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0389.html'}, {'name': '371', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/371'}, {'name': '18566', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18566'}, {'name': '1015539', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015539'}, {'name': '22699', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22699'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/44/summary.html'}, {'name': 'noteaday-archive-information-disclosure(24270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24270'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0404?


Explain the CVE ID: What does the identifier CVE-2006-0405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0405.

The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function.


Provide references for further information: Can you share references or external links related to CVE-2006-0405?

{'name': 'ADV-2006-0302', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0302'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.remotesensing.org/show_bug.cgi?id=1029'}, {'name': '18172', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/18172'}, {'name': 'GLSA-200605-17', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml'}, {'name': '20345', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20345'}, {'name': 'libtiff-tiffvsetfield-dos(24275)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24275'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.remotesensing.org/show_bug.cgi?id=1034'}, {'name': '18587', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18587'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0405?


Explain the CVE ID: What does the identifier CVE-2006-0406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0406.

search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-0406?

{'name': 'mybb-search-information-disclosure(24272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24272'}, {'name': '18577', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18577'}, {'name': '20060114 MyBB 1.0.2 Sniffing table perfix bug in search.php', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422227/100/0/threaded'}, {'name': '22736', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22736'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0406?


Explain the CVE ID: What does the identifier CVE-2006-0407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0407.

Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter.  NOTE: the original disclosure specified the name parameter, but a correction was later provided. NOTE: followup posts have both disputed and confirmed the original claim.


Provide references for further information: Can you share references or external links related to CVE-2006-0407?

{'tags': ['x_refsource_MISC'], 'url': 'http://kapda.ir/advisory-236.html'}, {'name': '20060123 Azbb v1.1.00 Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423353/100/0/threaded'}, {'name': '16351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16351'}, {'name': '20060128 [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423363/100/0/threaded'}, {'name': 'azbulletinboard-post-xss(24274)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24274'}, {'name': '20060309 Re: Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427194/100/0/threaded'}, {'name': '20060308 Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427076/30/6510/threaded'}, {'name': '20060308 Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427076/100/0/threaded'}, {'name': '18565', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18565'}, {'name': 'ADV-2006-0298', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0298'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0407?


Explain the CVE ID: What does the identifier CVE-2006-0408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0408.

rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code via unspecified vectors, possibly involving command line arguments.


Provide references for further information: Can you share references or external links related to CVE-2006-0408?

{'name': 'sge-rsh-gain-privileges(24281)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24281'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gridengine.sunsource.net/project/gridengine/60patches.txt'}, {'name': '18580', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18580'}, {'name': '16366', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16366'}, {'name': '1015531', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015531'}, {'name': 'ADV-2006-0308', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0308'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0408?


Explain the CVE ID: What does the identifier CVE-2006-0409 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0409.

Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup.


Provide references for further information: Can you share references or external links related to CVE-2006-0409?

{'name': '1015529', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015529'}, {'name': 'pixelpost-index-xss(24261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24261'}, {'name': 'ADV-2006-0309', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0309'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/45/summary.html'}, {'name': '18572', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18572'}, {'name': '20060123 [eVuln] Pixelpost Photoblog XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423384/100/0/threaded'}, {'name': '16362', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16362'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0409?


Explain the CVE ID: What does the identifier CVE-2006-0410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0410.

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.


Provide references for further information: Can you share references or external links related to CVE-2006-0410?

{'name': '19590', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19590'}, {'name': '19555', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19555'}, {'name': 'DSA-1029', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1029'}, {'name': 'ADV-2006-0448', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0448'}, {'name': 'DSA-1030', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1030'}, {'name': 'ADV-2006-0315', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0315'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718'}, {'name': '18575', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18575'}, {'name': '19591', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19591'}, {'name': '18745', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18745'}, {'name': 'adodb-postgresql-sql-injection(24314)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24314'}, {'name': '19691', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19691'}, {'name': 'DSA-1031', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1031'}, {'name': '22705', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22705'}, {'name': 'GLSA-200604-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml'}, {'name': '16364', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16364'}, {'name': '18732', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18732'}, {'name': 'GLSA-200602-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0410?


Explain the CVE ID: What does the identifier CVE-2006-0411 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0411.

claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges.


Provide references for further information: Can you share references or external links related to CVE-2006-0411?

{'name': '20060120 Claroline 1.7.2, sso identification vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422482'}, {'name': '16341', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16341'}, {'name': 'claroline-cookie-bypass-security(24326)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24326'}, {'name': '18588', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18588'}, {'name': 'ADV-2006-0320', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0320'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0411?


Explain the CVE ID: What does the identifier CVE-2006-0412 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0412.

SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action.


Provide references for further information: Can you share references or external links related to CVE-2006-0412?

{'name': 'cybershop-login-sql-injection(24005)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24005'}, {'name': '20060105 CyberShop User Login Sql Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-01/0064.html'}, {'name': '22365', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0412?


Explain the CVE ID: What does the identifier CVE-2006-0413 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0413.

Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0413?

{'name': '22717', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22717'}, {'name': '20060122 Newsphp Multiple SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423129/100/0/threaded'}, {'name': '18624', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18624'}, {'name': 'newsphp-index-sql-injection(24320)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24320'}, {'name': 'ADV-2006-0341', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0341'}, {'name': '16339', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16339'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0413?


Explain the CVE ID: What does the identifier CVE-2006-0414 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0414.

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server.


Provide references for further information: Can you share references or external links related to CVE-2006-0414?

{'name': '19795', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19795'}, {'name': '18576', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18576'}, {'name': 'tor-service-information-disclosure(24285)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24285'}, {'name': '18323', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/18323'}, {'name': '22689', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22689'}, {'name': '20514', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20514'}, {'name': 'GLSA-200606-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200606-04.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tor.eff.org/cvs/tor/ChangeLog'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://archives.seul.org/or/announce/Jan-2006/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0414?


Explain the CVE ID: What does the identifier CVE-2006-0415 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0415.

Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0415?

{'name': '22784', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22784'}, {'name': 'sleeperchat-index-xss(24300)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24300'}, {'name': '1015525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015525'}, {'name': '16363', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16363'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0415?


Explain the CVE ID: What does the identifier CVE-2006-0416 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0416.

SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parameter to (1) chat_no.php and (2) chat_if.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0416?

{'name': 'sleeperchat-txt-security-bypass(24357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24357'}, {'name': '1015525', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015525'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0416?


Explain the CVE ID: What does the identifier CVE-2006-0417 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0417.

SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-0417?

{'name': 'ADV-2006-0310', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0310'}, {'name': '16367', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16367'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/47/summary.html'}, {'name': '22729', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22729'}, {'name': '18604', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18604'}, {'name': '1015534', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015534'}, {'name': 'minibloggie-login-sql-injection(24280)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24280'}, {'name': '20060124 [eVuln] miniBloggie Authentication Bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423126/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0417?


Explain the CVE ID: What does the identifier CVE-2006-0418 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0418.

Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username.


Provide references for further information: Can you share references or external links related to CVE-2006-0418?

{'name': '20060124 [ISecAuditors Advisories] Arbitrary flash code remote execution in 123flashchat', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423164/100/0/threaded'}, {'name': '16360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16360'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0418?


Explain the CVE ID: What does the identifier CVE-2006-0419 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0419.

BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.


Provide references for further information: Can you share references or external links related to CVE-2006-0419?

{'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': 'BEA06-81.01', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/163'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0419?


Explain the CVE ID: What does the identifier CVE-2006-0420 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0420.

BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause "looping stack overflow errors."


Provide references for further information: Can you share references or external links related to CVE-2006-0420?

{'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': 'BEA06-106.01', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0420?


Explain the CVE ID: What does the identifier CVE-2006-0421 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0421.

By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended.


Provide references for further information: Can you share references or external links related to CVE-2006-0421?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': 'BEA06-108.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/165'}, {'name': 'weblogic-cross-domain-management(24286)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24286'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18581', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18581'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0421?


Explain the CVE ID: What does the identifier CVE-2006-0422 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0422.

Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0422?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': 'BEA06-109.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/166'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}, {'name': 'weblogic-java-mbean-access(24294)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24294'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0422?


Explain the CVE ID: What does the identifier CVE-2006-0423 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0423.

BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2006-0423?

{'name': 'ADV-2008-0613', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2008/0613'}, {'name': 'weblogic-portal-config-info-disclosure(40705)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/40705'}, {'name': '18593', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18593'}, {'name': 'BEA06-110.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/167'}, {'name': 'ADV-2006-0312', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0312'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': 'weblogicportal-config-info-disclosure(24284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24284'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}, {'name': 'BEA08-110.01', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/262'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0423?


Explain the CVE ID: What does the identifier CVE-2006-0424 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0424.

BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.


Provide references for further information: Can you share references or external links related to CVE-2006-0424?

{'name': 'BEA06-111.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/168'}, {'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': 'weblogic-server-log-disclosure(24295)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24295'}, {'name': '22776', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22776'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0424?


Explain the CVE ID: What does the identifier CVE-2006-0425 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0425.

BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0425?

{'name': '18593', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18593'}, {'name': 'weblogic-deployment-descriptor-disclosure(24297)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24297'}, {'name': 'ADV-2006-0312', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0312'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': 'BEA06-112.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/169'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0425?


Explain the CVE ID: What does the identifier CVE-2006-0426 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0426.

BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change occurs, stores the old and new passwords in cleartext in the DefaultAuditRecorder.log file, which could allow attackers to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2006-0426?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': '22775', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22775'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}, {'name': 'weblogic-password-information-disclosure(24290)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24290'}, {'name': 'BEA06-113.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/170'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0426?


Explain the CVE ID: What does the identifier CVE-2006-0427 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0427.

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.


Provide references for further information: Can you share references or external links related to CVE-2006-0427?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': 'BEA06-114.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/171'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': '22774', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22774'}, {'name': 'weblogic-servlets-obtain-information(24291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24291'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0427?


Explain the CVE ID: What does the identifier CVE-2006-0428 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0428.

Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.


Provide references for further information: Can you share references or external links related to CVE-2006-0428?

{'name': '18593', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18593'}, {'name': '22767', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22767'}, {'name': 'ADV-2006-0312', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0312'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': 'BEA06-115.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/172'}, {'name': 'weblogic-wsrp-gain-access(24293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24293'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0428?


Explain the CVE ID: What does the identifier CVE-2006-0429 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0429.

BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions.


Provide references for further information: Can you share references or external links related to CVE-2006-0429?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': '22773', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22773'}, {'name': 'weblogic-security-provider-weakness(24298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24298'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': 'BEA06-116.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/173'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0429?


Explain the CVE ID: What does the identifier CVE-2006-0430 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0430.

Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown).


Provide references for further information: Can you share references or external links related to CVE-2006-0430?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': 'BEA06-117.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/174'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': 'weblogic-connection-filter-dos(24301)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24301'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0430?


Explain the CVE ID: What does the identifier CVE-2006-0431 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0431.

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0431?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': 'BEA06-118.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/175'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}, {'name': 'weblogic-ssl-identity-exposure(24302)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24302'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0431?


Explain the CVE ID: What does the identifier CVE-2006-0432 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0432.

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.


Provide references for further information: Can you share references or external links related to CVE-2006-0432?

{'name': 'ADV-2006-0313', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0313'}, {'name': 'weblogic-jdni-security-weakness(24299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24299'}, {'name': '1015528', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015528'}, {'name': '18592', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18592'}, {'name': 'BEA06-119.00', 'tags': ['vendor-advisory', 'x_refsource_BEA'], 'url': 'http://dev2dev.bea.com/pub/advisory/176'}, {'name': '16358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0432?


Explain the CVE ID: What does the identifier CVE-2006-0433 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0433.

Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop).


Provide references for further information: Can you share references or external links related to CVE-2006-0433?

{'name': 'ADV-2006-0409', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0409'}, {'name': 'FreeBSD-SA-06:08', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc'}, {'name': '22861', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22861'}, {'name': '16466', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16466'}, {'name': '1015566', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015566'}, {'name': '399', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/399'}, {'name': 'bsd-sack-handling-dos(24453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24453'}, {'name': '18696', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18696'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0433?


Explain the CVE ID: What does the identifier CVE-2006-0434 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0434.

Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences and null bytes in the sAction parameter, a different vulnerability than CVE-2006-0244.  NOTE: if the functionality of phpXplorer supports the upload of PHP files, then this issue would not cross privilege boundaries and would not be a vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2006-0434?

{'name': 'phpxplorer-sshare-directory-traversal(39982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39982'}, {'name': '20060118 phpXplorer file inclusion biyosecurity.be', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/422434/100/0/threaded'}, {'name': '16292', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16292'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0434?


Explain the CVE ID: What does the identifier CVE-2006-0435 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0435.

Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.


Provide references for further information: Can you share references or external links related to CVE-2006-0435?

{'name': '19712', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19712'}, {'name': '18621', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18621'}, {'name': '19859', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19859'}, {'name': '20060202 The History of the Oracle PLSQL Gateway Flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423819/100/0/threaded'}, {'name': '20060125 Workaround for unpatched Oracle PLSQL Gateway flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423029/100/0/threaded'}, {'name': '402', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/402'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html'}, {'name': '1015544', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015544'}, {'name': '20060131 Re: Workaround for unpatched Oracle PLSQL Gateway flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423673/100/0/threaded'}, {'name': 'ADV-2006-1571', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1571'}, {'name': 'ADV-2006-0338', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0338'}, {'name': '16384', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16384'}, {'name': '403', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/403'}, {'name': 'SSRT061148', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/432267/100/0/threaded'}, {'name': 'oracle-plsql-command-execution(24363)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24363'}, {'name': '20060125 Workaround for unpatched Oracle PLSQL Gateway flaw', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041742.html'}, {'name': '20060202 More on the workaround for the unpatched Oracle PLSQL Gateway flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423822/100/0/threaded'}, {'name': '20060208 Re: Workaround for unpatched Oracle PLSQL Gateway flaw', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/424394/100/0/threaded'}, {'name': '20060202 The History of the Oracle PLSQL Gateway Flaw', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041898.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html'}, {'name': 'ADV-2006-1397', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1397'}, {'name': '22719', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22719'}, {'name': 'HPSBMA02113', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/432267/100/0/threaded'}, {'name': 'VU#169164', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/169164'}, {'name': '20060202 More on the workaround for the unpatched Oracle PLSQL Gateway flaw', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041899.html'}, {'name': '1015961', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015961'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0435?


Explain the CVE ID: What does the identifier CVE-2006-0436 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0436.

Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0436?

{'name': 'SSRT061099', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00591401'}, {'name': '18600', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18600'}, {'name': 'oval:org.mitre.oval:def:1577', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1577'}, {'name': 'ADV-2006-0322', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0322'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-025.htm'}, {'name': 'hpux-unspecified-privilege-escalation(24318)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24318'}, {'name': '18596', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18596'}, {'name': '1015530', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015530'}, {'name': 'HPSBUX02091', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00591401'}, {'name': 'oval:org.mitre.oval:def:1453', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1453'}, {'name': 'oval:org.mitre.oval:def:1586', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1586'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0436?


Explain the CVE ID: What does the identifier CVE-2006-0437 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0437.

Cross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the (1) smile_url or (2) smile_emotion parameters, which bypasses a check for "<" and ">" characters.


Provide references for further information: Can you share references or external links related to CVE-2006-0437?

{'name': 'ADV-2006-0445', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0445'}, {'name': '18693', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18693'}, {'name': '20060203 phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html'}, {'name': '20060203 phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin', 'tags': ['third-party-advisory', 'x_refsource_SREASONRES'], 'url': 'http://securityreason.com/achievement_securityalert/31'}, {'name': 'phpbb-referer-header-http-xss(24497)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24497'}, {'name': '22928', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22928'}, {'name': '406', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/406'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0437?


Explain the CVE ID: What does the identifier CVE-2006-0438 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0438.

Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to (1) admin/admin_users.php and (2) modcp.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0438?

{'name': '22929', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22929'}, {'name': 'ADV-2006-0445', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0445'}, {'name': '18693', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18693'}, {'name': '20060203 phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html'}, {'name': '20060203 phpBB 2.0.19 Cross Site Request Forgeries and XSS Admin', 'tags': ['third-party-advisory', 'x_refsource_SREASONRES'], 'url': 'http://securityreason.com/achievement_securityalert/31'}, {'name': 'phpbb-referer-header-http-xss(24497)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24497'}, {'name': '406', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/406'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0438?


Explain the CVE ID: What does the identifier CVE-2006-0439 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0439.

Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt.


Provide references for further information: Can you share references or external links related to CVE-2006-0439?

{'name': '1015533', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015533'}, {'name': 'ADV-2006-0321', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0321'}, {'name': 'textrider-data-information-disclosure(24279)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24279'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/46/summary.html'}, {'name': '18605', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18605'}, {'name': '20060124 [eVuln] Text Rider Sensitive Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423130/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0439?


Explain the CVE ID: What does the identifier CVE-2006-0440 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0440.

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password (possibly via another vulnerability that reads it from a data file), then including the hash in a cookie.


Provide references for further information: Can you share references or external links related to CVE-2006-0440?

{'name': '1015533', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015533'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/46/summary.html'}, {'name': '20060124 [eVuln] Text Rider Sensitive Information Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423130/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0440?


Explain the CVE ID: What does the identifier CVE-2006-0441 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0441.

Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed.


Provide references for further information: Can you share references or external links related to CVE-2006-0441?

{'name': '20060124 SamiFTPd buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423148/100/0/threaded'}, {'name': '40675', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40675/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/sami_ftp_poc.pl'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.karjasoft.com/samiftp/news'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.critical.lt/?vulnerabilities/208'}, {'name': '18574', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18574'}, {'name': 'samiftpserver-user-bo(24325)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24325'}, {'name': '16370', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16370'}, {'name': 'ADV-2006-0317', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0317'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0441?


Explain the CVE ID: What does the identifier CVE-2006-0442 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0442.

Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are different attack vectors, and probably a different vulnerability, than CVE-2006-0218 and CVE-2006-0219.


Provide references for further information: Can you share references or external links related to CVE-2006-0442?

{'tags': ['x_refsource_MISC'], 'url': 'http://kapda.ir/advisory-241.html'}, {'name': '18603', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18603'}, {'name': '20060124 [KAPDA::#25] - MyBB 1.x Cross_Site_Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423128/100/0/threaded'}, {'name': '1015535', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015535'}, {'name': 'ADV-2006-0316', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0316'}, {'name': '16361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16361'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0442?


Explain the CVE ID: What does the identifier CVE-2006-0443 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0443.

Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment.


Provide references for further information: Can you share references or external links related to CVE-2006-0443?

{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/49/summary.html'}, {'name': '22716', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22716'}, {'name': '16376', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16376'}, {'name': '369', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/369'}, {'name': '18610', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18610'}, {'name': '20060125 [eVuln] CheesyBlog XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423023/100/0/threaded'}, {'name': 'cheesyblog-archive-xss(24292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24292'}, {'name': 'ADV-2006-0326', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0443?


Explain the CVE ID: What does the identifier CVE-2006-0444 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0444.

SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page.  NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.


Provide references for further information: Can you share references or external links related to CVE-2006-0444?

{'name': '20060125 HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423145/100/0/threaded'}, {'name': '16391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16391'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt'}, {'name': '22722', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22722'}, {'name': '22720', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22720'}, {'name': 'ADV-2006-0342', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0342'}, {'name': '18597', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18597'}, {'name': 'phpclanwebsite-index-sql-injection(24355)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24355'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0444?


Explain the CVE ID: What does the identifier CVE-2006-0445 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0445.

index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php.  NOTE: this might be the result of a file inclusion vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2006-0445?

{'name': '20060125 HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/423145/100/0/threaded'}, {'name': '16391', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16391'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt'}, {'name': '22721', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22721'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0445?


Explain the CVE ID: What does the identifier CVE-2006-0446 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0446.

Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0446?

{'name': 'ADV-2006-0319', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0319'}, {'name': '16371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16371'}, {'name': '18594', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18594'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt1pt4'}, {'name': 'webwork-unknown-command-execution(24322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24322'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0446?


Explain the CVE ID: What does the identifier CVE-2006-0447 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0447.

Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the (1) AUTH PLAIN or (2) AUTH LOGIN SMTP commands, which is not properly handled by (a) EPSTRS.EXE or (b) SPA-RS.EXE; (3) a long username in the APOP POP3 command, which is not properly handled by (c) EPSTPOP4S.EXE or (d) SPA-POP3S.EXE; (4) a long IMAP DELETE command, which is not properly handled by (e) EPSTIMAP4S.EXE or (f) SPA-IMAP4S.EXE.


Provide references for further information: Can you share references or external links related to CVE-2006-0447?

{'name': 'ADV-2006-0318', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0318'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-1/advisory/'}, {'name': '22761', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22761'}, {'name': '18480', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18480'}, {'name': '22763', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22763'}, {'name': 'epost-smtp-username-bo(24331)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24331'}, {'name': 'epost-imap-mailbox-dos(24334)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24334'}, {'name': 'epost-pop3-username-bo(24333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24333'}, {'name': '16379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16379'}, {'name': '22762', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22762'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0447?


Explain the CVE ID: What does the identifier CVE-2006-0448 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0448.

Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allow remote attackers to (a) list arbitrary directories or cause a denial of service via the LIST command; or create arbitrary files via the (b) APPEND, (c) COPY, or (d) RENAME commands.


Provide references for further information: Can you share references or external links related to CVE-2006-0448?

{'name': 'epost-append-copy-rename-file-creation(24336)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24336'}, {'name': 'ADV-2006-0318', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0318'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-1/advisory/'}, {'name': '22764', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22764'}, {'name': '18480', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18480'}, {'name': '22765', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22765'}, {'name': '16379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16379'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0448?


Explain the CVE ID: What does the identifier CVE-2006-0449 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0449.

Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of service (infinite loop) by sending an APPEND command and disconnecting before the expected amount of data is sent.


Provide references for further information: Can you share references or external links related to CVE-2006-0449?

{'name': 'ADV-2006-0318', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0318'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-1/advisory/'}, {'name': '22766', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22766'}, {'name': 'epost-imap-append-dos(24341)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24341'}, {'name': '18480', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18480'}, {'name': '16379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16379'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0449?


Explain the CVE ID: What does the identifier CVE-2006-0450 mean in the context of cybersecurity?