14488 matches found
CVE-2006-6492
CVE-2006-6492 entry is rejected/not used and does not represent an active vulnerability.
CVE-2006-6491
CVE-2006-6491 is rejected/not used and does not represent an active vulnerability entry.
netvigilance-sa10.txt
netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...
KLA10293 Multiple vulnerabilities in PentaWare
Multiple serious vulnerabilities have been found in PentaWare. Malicious users can exploit these vulnerabilities to cause denial of service or extract files to an arbitrary directory. Below is a complete list of vulnerabilities 1. Unknown vectors can be exploited remotely via a specially designed...
Fedora Core 5 : squirrelmail-1.4.8-3.fc5 (2007-088)
http://squirrelmail.org/security/issue/2006-12-02 CVE-2006-6142 Cross site scripting in compose, draft & HTML mail viewing http://squirrelmail.org/security/issue/2006-12-03 Workaround for Internet Explorer MIME handling Note that Tenable Network Security has extracted the preceding description...
Mozilla JavaScript Engine multiple memory corruption vulnerabilities
Overview Several vulnerabilities exists in the Mozilla JavaScript Engine that may allow a remote attacker to compromise a vulnerable system. Description The Mozilla JavaScript Engine contains multiple vulnerabilities that may result in memory corruption. According to the Mozilla Foundation Securi...
CVE-2006-6936
Cross-site scripting XSS vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via 1 the catname parameter to displaypic.asp or 2 the search field. NOTE: vector 1 likely overlaps CVE-2006-3032...
CVE-2006-6937
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter...
CVE-2006-6939
GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the opensbuf function...
CVE-2006-6938
CVE-2006-6938 is a directory traversal in NitroTech 0.0.3a (distributed before 2006) that allows remote attackers to include arbitrary files via ".." in the root parameter of includes/common.php. Documents report a network-based, low-complexity attack with no authentication, potentially exposing ...
Fedora Core 5 : spamassassin-3.1.3-1.fc5 (2006-598)
3.1.3 Resolves CVE-2006-2447. Note that you are affected by this bug only if you launched spamd with both --vpopmail and --paranoid, which is not a common configuration. Also included are bug fixes from 3.1.2. Note that Tenable Network Security has extracted the preceding description block direct...
Fedora Core 6 : xorg-x11-server-1.1.1-47.4.fc6 (2007-035)
Tue Jan 9 2007 Adam Jackson 1.1.1-47.4.fc6 - xorg-xserver-1.1.0-dbe-render.diff: CVE 2006-6101. - Tue Dec 5 2006 Adam Jackson 1.1.1-47.3.fc6 - xorg-x11-server-1.1.1-xf86config-comment-less.patch: Added, makes pyxf86config not grow the config file every time it's run. Note that Tenable Network...
Fedora Core 5 : ruby-1.8.5-1.fc5 (2006-1110)
Fri Oct 27 2006 Akira TAGOH - 1.8.5-1 - security fix release. - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that causes the denial of service. 212396 - backport fixes from devel. - fixed rbconfig.rb to refer to DESTDIR for sitearchdir. 207311 - updates to 1.8.5 - removed...
Fedora Core 6 : fetchmail-6.3.6-1.fc6 (2007-042)
Sat Jan 6 2007 Miloslav Trmac - 6.3.6-1 - Update to fetchmail-6.3.6 CVE-2006-5867, CVE-2006-5974 - Wed Nov 1 2006 Miloslav Trmac - 6.3.5-1 - Update to fetchmail-6.3.5 - Fix some rpmlint warnings Note that Tenable Network Security has extracted the preceding description block directly from the...
RHEL 3 / 4 : libgsf (RHSA-2007:0011)
Updated libgsf packages that fix a buffer overflow flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNOME Structured File Library is a utility library for reading and writing structured file formats. A heap based buff...
Fedora Core 5 : openoffice.org-2.0.2-5.16.2 (2006-770)
CVE-2006-2198 macro security - CVE-2006-2199 java applets - CVE-2006-3117 corrupt file format more details at http://www.openoffice.org/security/bulletin-20060629.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
GLSA-200701-09 : oftpd: Denial of Service
The remote host is affected by the vulnerability described in GLSA-200701-09 oftpd: Denial of Service By specifying an unsupported address family in the arguments to a LPRT or LPASV command, an assertion in oftpd will cause the daemon to abort. Impact : Remote, unauthenticated attackers may be ab...
Fedora Core 4 : openoffice.org-2.0.1.1-7.1 (2006-764)
CVE-2006-2198 macro security - CVE-2006-2199 java applets - CVE-2006-3117 corrupt file format more details at http://www.openoffice.org/security/bulletin-20060629.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...
Fedora Core 4 : ruby-1.8.4-3.fc4 (2006-842)
Thu Jul 20 2006 Akira TAGOH - 1.8.4-3 - security fixes CVE-2006-3694 - ruby-1.8.4-fix-insecure-dir-operation.patch : - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure operations in the certain safe-level restrictions. 199538 - ruby-1.8.4-fix-alias-safe-level.patch: fixed to...