GCVE - cpe:2.3:a:verity:ultraseek:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:verity:ultraseek:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Verity (`c6c32479-4f1b-58ab-85c6-a62b5c5b3ef7`)
Product	Ultraseek (`3b7be29d-d4de-5e61-b6c0-21c17b22c3f4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-5971`	vulnerable	2026-06-08 04:49:21.706787	Details available Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable. Published: 2006-11-18T00:00:00.000Z Updated: 2024-08-07T20:12:31.332Z Open on db.gcve.eu Reference links http://www.ultraseek.com/support/docs/RELNOTES.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/30321 http://www.ultraseek.com/support/docs/release_notes/ultraseek.5.6.2.txt http://www.osvdb.org/30289 http://secunia.com/advisories/22892	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5970`	vulnerable	2026-06-08 04:49:21.706448	Details available Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with (1) a null ("%00") terminated url parameter to help/urlstatusgo.html; or missing parameters to (2) help/header.html, (3) help/footer.html, (4) spell.html, (5) coreforma.html, (6) daterange.html, (7) hits.html, (8) hitsnavbottom.html, (9) indexform.html, (10) indexforma.html, (11) languages.html, (12) nohits.html, (13) onehit1.html, (14) onehit2.html, (15) query.html, (16) queryform0.html, (17) queryform0a.html, (18) queryform1.html, (19) queryform1a.html, (20) queryform2.html, (21) queryform2a.html, (22) quicklinks.html, (23) relatedtopics.html, (24) signin.html, (25) subtopics.html, (26) thesaurus.html, (27) topics.html, (28) hitspagebar.html, (29) highlight/highlight.html, (30) highlight/highlight_one.html, and (31) highlight/topnav.html, which leaks the installation path in the resulting error message. Published: 2006-11-18T00:00:00.000Z Updated: 2024-08-07T20:12:31.195Z Open on db.gcve.eu Reference links http://www.ultraseek.com/support/docs/RELNOTES.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/30314 http://www.osvdb.org/30288 http://secunia.com/advisories/22892 http://www.securityfocus.com/archive/1/451847/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5819`	vulnerable	2026-06-08 04:49:21.351630	Details available Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script. Published: 2006-11-18T00:00:00.000Z Updated: 2024-08-07T20:04:55.602Z Open on db.gcve.eu Reference links http://www.ultraseek.com/support/docs/RELNOTES.txt http://www.osvdb.org/22892 http://www.securityfocus.com/bid/21120 http://www.osvdb.org/30286 http://www.kb.cert.org/vuls/id/559616	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0050`	vulnerable	2026-06-08 04:47:48.163654	Details available Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others. Published: 2004-05-06T04:00:00.000Z Updated: 2024-08-08T00:01:23.620Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/16066 http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html http://marc.info/?l=bugtraq&m=108377388114888&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.