[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

[slackware-security] koffice

A new koffice package is available for Slackware 10.2 to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-6120 Here are the details from the Slackware 10.2 ChangeLog:...

firefox security update

CentOS Errata and Security Advisory CESA-2006:0758 Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web...

CVE-2006-6719

The ftpsyst function in ftp-basic.c in Free Software Foundation FSF GNU wget 1.10.2 allows remote attackers to cause a denial of service application crash via a malicious FTP server with a large number of blank 220 responses to the SYST command...

CVE-2006-6717

The CVE-2006-6717 entry affects the Allied Telesis AT-9000/24 Ethernet switch. The vulnerability arises because the device accepts management packets from arbitrary VLANs, contrary to documentation, enabling remote attackers to reach the switch from unexpected locations. The impact is described i...

CVE-2006-6716

The CVE-2006-6716 issue affects Eric GUILLAUME uploader&downloader 3, specifically the administration/administre2.php component. The vulnerability is a SQL injection in the id_user parameter that can allow remote attackers to execute arbitrary SQL commands. This is caused by improper input handli...

CVE-2006-6721

Multiple cross-site scripting XSS vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 sbNick or 2 sbKommentar parameter...

CVE-2006-6720

The CVE-2006-6720 entry describes a PHP remote file inclusion in Azucar CMS 1.3, exploitable through admin/index_sitios.php via a URL in the _VIEW parameter to execute arbitrary PHP code. Documented CVSSv2 base metrics indicate a HIGH overall risk (Network vector, Low attack complexity, no authen...

CVE-2006-6722

CVE-2006-6722 affects Bandwebsite (Bandsite portal system) 1.5. Remote attackers can create administrative accounts by issuing a direct request to admin.php with the Login parameter set to 1. This is a network‑level issue with low attack complexity and no authentication required, allowing partial...

CVE-2006-6718

The CVE-2006-6718 issue involves the Allied Telesis AT-9000/24 Ethernet switch, where the admin account uses a default password, "manager". This enables remote attackers to perform unauthorized actions. The entry is accompanied by a CVSS v2 base score of 7.5 (HIGH) with network attack vector, no ...

CVE-2006-6721

CVE-2006-6721 describes multiple cross-site scripting (XSS) vulnerabilities in shout.php of Knusperleicht ShoutBox 2.6. An attacker can remotely inject arbitrary script or HTML by supplying the (1) sbNick or (2) sbKommentar parameter, enabling script execution in the victim’s browser. The affecte...

CVE-2006-6716

SQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader&downloader 3 allows remote attackers to execute arbitrary SQL commands via the iduser parameter...

CVE-2006-6712

Cross-site scripting XSS vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages...

CVE-2006-6707

Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control NeoTraceExplorer.dll in NeoTrace Express 3.25 and NeoTrace Pro aka McAfee Visual Trace 3.25 allows remote attackers to execute arbitrary code via a long argument string to the TraceTarget method. NOTE: The provenan...

CVE-2006-6708

CVE-2006-6708 describes a cross-site scripting (XSS) vulnerability in MGinternet Property Site Manager, specifically in the listings.asp handler. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the s parameter. The available documents do not provid...

CVE-2006-6705

The CVE-2006-6705 issue affects Hitachi Soumu Workflow template files (Groupmax 01-00…01-01, Soumu Workflow 02-00…03-03, Koukyoumuke Soumu Workflow 01-00…01-01). The vulnerability enables remote attackers to bypass authentication on web pages via unknown vectors, per JVN and NVD entries. Impact i...

CVE-2006-6704

CVE-2006-6704 : The NVD entry describes a cross-site scripting (XSS) vulnerability in the Webadmin component of @Mail prior to version 4.6. The issue allows remote attackers to inject arbitrary web script or HTML via vectors involving unescaped data stored in the database. The provided sources in...

CVE-2006-6706

Technical details about CVE-2006-6706 are not publicly available in the provided documents. Please monitor for updates from official advisories.

CVE-2006-6715

PowerClan 1.14a and earlier is affected by a PHP remote file inclusion in footer.inc.php. The root cause is a user-controllable URL passed via the settings[footer] parameter when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code. This vulnerability can enable co...

CVE-2006-6712

SugarCRM Open Source versions 4.5.0f and earlier are affected by a Cross-Site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages, potentially executing in the victim’s browser and, per JVN, coul...