14488 matches found
CVE-2006-6946
CVE-2006-6946 affects NEC MultiWriter 1700C?built-in web server. The vulnerability is an authentication bypass allowing remote attackers to modify the device’s configuration via the web interface. Connected JVN entry confirms that unauthorized users could change the system configuration; no mitig...
CVE-2006-6951
CVE-2006-6951 describes a cross-site scripting (XSS) flaw in OdysseusBlog’s blog.php, exploitable by supplying a crafted value for the page parameter. Remote attackers could inject arbitrary script/HTML when the affected page is viewed, as reported in the connected documents. The sources confirm ...
Oracle 10g - SYS.DBMS_CDC_IMPDP.BUMP_SEQUENCE PL / SQL Injection
/ Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret Privileges needed: - CREATE SESSION Max. Length 97. Very, very cool / select from userroleprivs ; DECLARE SEQUENCEOWNER VARCHAR2200; SEQUENCENAME VARCHAR2200; vuserid number; vcommands VARCHAR232767; NEWVALUE NUMBER; BEGIN SELEC...
Oracle 10g - SYS.DBMS_CDC_IMPDP.BUMP_SEQUENCE PL SQL Injection
Oracle 10g - SYS.DBMSCDCIMPDP.BUMPSEQUENCE PL SQL Injection / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret Privileges needed: - CREATE SESSION Max. Length 97. Very, very cool / select from userroleprivs ; DECLARE SEQUENCEOWNER VARCHAR2200; SEQUENCENAME VARCHAR2200; vuserid...
Oracle 10g - SYS.KUPW$WORKER.MAIN PL SQL Injection
Oracle 10g - SYS.KUPW$WORKER.MAIN PL SQL Injection / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret Privileges needed: - CREATE SESSION - CREATE PROCEDURE / select from userroleprivs ; CREATE OR REPLACE FUNCTION F1 RETURN NUMBER AUTHID CURRENTUSER IS PRAGMA...
Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update
Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 23 Jan 2007 The previous acroread packages were missing dependencies on the new...
[SECURITY] [DSA 1251-1] New netrik packages fix arbitary shell command execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1251-1 [email protected] http://www.debian.org/security/ Steve Kemp January 21, 2007 - ------------------------------------------------------------------------ Package : netrik Vulnerability :...
[Full-disclosure] [SECURITY] [DSA 1251-1] New netrik packages fix arbitary shell command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1251-1 [email protected] http://www.debian.org/security/ Steve Kemp January 21, 2007 -...
CVE-2006-6944
phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false headers...
CVE-2006-6943
PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to a scripts/checklang.php and b themes/darkblueorange/layout.inc.php; and via the 1 lang, 2 target, 3 db, 4 goto, 5 table, and 6 tblgroup array arguments to c index.php, and the 7 back argument t...
CVE-2006-6944
CVE-2006-6944 affects phpMyAdmin prior to 2.9.1.1. The vulnerability allows remote attackers to bypass IP-based Allow/Deny access rules via false headers, enabling unauthorized access. Public references (SUSE security advisory and OpenVAS/Debian advisories) confirm the issue and link it to the ph...
CVE-2006-6942
CVE-2006-6942 involves multiple XSS vulnerabilities in PhpMyAdmin prior to 2.9.1.1. The description lists specific injection points, including (1) a comment for a table name via db_operations.php, (2) the db parameter to db_create.php, (3) the newname parameter to db_operations.php, (4) query_his...
CVE-2006-5964
choShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user-assisted remote attackers to cause a denial of service system crash by right clicking on a file with a long filename...
CVE-2006-5964
choShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user-assisted remote attackers to cause a denial of service system crash by right clicking on a file with a long filename...
CVE-2006-5964
CVE-2006-5964 affects PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 (PentaWare/PentaZip). The issue is a denial-of-service via right-clicking a file with a long filename, enabling local users and user-assisted remote attackers to crash the system. Root cause centers on handling of long filename...
CVE-2006-6941
The CVE-2006-6941 entry concerns FreeWebshop 2.2.2 and earlier where an invalid action parameter in an info operation allows remote attackers to obtain path information via an error message (partial confidentiality impact). Affected component is the info operation handling in index.php; the root ...
Fedora Core 6 : ed-0.3-0.fc6 (2007-100)
Thu Jan 18 2007 Karsten Hopp 0.3-0.fc6 - rebuild for FC-6, fixes CVE-2006-6939 - Thu Jan 18 2007 Karsten Hopp 0.3-2 - fix man page permissions 222581 - Mon Nov 13 2006 Karsten Hopp 0.3-1 - update to ed-0.3 Note that Tenable Network Security has extracted the preceding description block directly...
CA BrightStor ARCserve Tape Engine Buffer Overflow
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...
CVE-2006-6489
CVE-2006-6489 affects the SISCO OSI stack (as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP). The underlying issue is the stack’s improper handling of malformed packets, which can be exploited remotely to cause a denial-of-service—terminating the application and requ...
