CVE-2006-6749

The provided data identifies CVE-2006-6749 as a vulnerability in OpenSER 1.1.0 where a buffer overflow occurs in the parse_expression function within parse_config, triggered by a long str parameter. The root cause is a buffer overflow in that function. The description specifies the impact as unkn...

CVE-2006-6751

CVE-2006-6751 : Format-string vulnerability in XM Easy Personal FTP Server (versions 5.2.1 and 5.3.0) allows remote attackers to trigger a crash via format specifiers in the USER command or other commands, causing a denial of service and partial availability impact. No remediation details are pro...

CVE-2006-6752

The CVE-2006-6752 entry describes a buffer overflow in FTPRush 1.0.0.610 that could allow an attacker to gain privileges by supplying a long Host field. The description notes uncertainty about provenance and whether the issue crosses security boundaries; no exploitation details or patch informati...

CVE-2006-6746

The CVE concerns Xt-News 0.1, where multiple cross-site scripting (XSS) vulnerabilities affect user-supplied input via the id_news parameter. Specifically, the flaws can be triggered through add_comment.php or show_news.php, enabling remote attackers to inject arbitrary web script or HTML. Impact...

DSA-1242-1 elog

Bulletin has no description...

CVE-2006-6745

Multiple unspecified vulnerabilities in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, and Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges,...

CVE-2006-6739

PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTPDOCUMENTROOT parameter, a different vector than CVE-2006-6689...

CVE-2006-6736

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6731

Multiple buffer overflows in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allow attackers to develop Java applets that read, write, or execute...

CVE-2006-6737

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

CVE-2006-6745

Multiple unspecified vulnerabilities in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, and Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges,...

CVE-2006-6745

CVE-2006-6745 describes serialization-related flaws in Sun JDK/JRE 5.0 Update 7 and earlier, and Java SDK/JRE 1.4.2_12 and earlier 1.4.x, that could allow an untrusted Java applet or application to gain privileges. The connected advisories confirm these issues affect multiple IBM Java runtimes as...

CVE-2006-6732

PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the abs parameter...

CVE-2006-6736

CVE-2006-6736 affects Sun JDK/JRE 5.0 Update 6 and earlier, J2SDK/JRE 1.4.2_12 and earlier 1.4.x, and JDK/JRE 1.3.1_18 and earlier. The vulnerability allows an untrusted applet to access data in other applets (two issues). The connected advisories reference fixes in IBM/Sun Java updates and list ...

CVE-2006-6740

CVE-2006-5634 affects phpProfiles 2.1 Beta, allowing remote PHP code execution via a URL in the reqpath parameter to body.inc.php and body_blog.inc.php in users/include/ or via usrinc in users/include/upload_ht.inc.php. This is a PHP remote file inclusion (RFI) vulnerability. CVE-2006-6740 covers...

CVE-2006-6731

CVE-2006-6731 describes multiple buffer overflow vulnerabilities in Sun JDK/JRE 5.0 Update 7 and earlier, J2SE 1.4.2_12 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issues affect Java applets’ ability to read, write, or execute local files, with root causes including (1) integer ove...

CVE-2006-6741

CVE-2006-6741 concerns a CSRF vulnerability in the urlobox component of MKPortal. The issue allows remote attackers to delete arbitrary administrator messages by triggering a delete operation embedded in an img BBcode tag. Affected software is MKPortal (specifically the urlobox feature); underlyi...

CVE-2006-6737

CVE-2006-6737 affects Sun JDK/JRE 5.0 Update 5 and earlier, J2SDK/JRE 1.4.2_10 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issue allows an untrusted applet to access data in other applets (cross-applet data access). Red Hat and SUSE/OpenVAS entries confirm IBM/Java updates mitigate...

CVE-2006-6738

The CVE-2006-6738 entry concerns PHP remote file inclusion in statistic.php of cwmCounter 5.1.1 and earlier. The underlying issue is that an attacker can pass a URL in the path parameter, enabling remote PHP code execution on the affected system. The NVD entry assigns a base CVSSv2 score of 6.8 (...

CVE-2006-6739

CVE-2006-6739 describes a PHP remote file inclusion in Paristemi 0.8.3, specifically the buycd.php component. The root cause is unsafe handling of a URL provided via the HTTP_DOCUMENT_ROOT parameter, allowing an attacker to include arbitrary PHP code and potentially execute it on the server. The ...