CVE-2006-6670

Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL...

CVE-2006-6670

Technical details and concrete information about CVE-2006-6670 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, impact, vectors, or fixes are disclosed here.

CVE-2006-6667

Multiple SQL injection vulnerabilities in VerliAdmin 0.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 nickmod or 2 nick parameter to a repass.php or b verify.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third part...

CVE-2006-6660

The CVE concerns KDE libkhtml up to version 4.2.0 (used by Konqueror, KMail, and related apps). The nodeType function parsing HTML may be mishandled by malformed tags, potentially allowing a remote attacker to cause a denial-of-service (crash), with the impact described as partial availability im...

CVE-2006-6664

The CVE-2006-6664 issue affects Marathon Aleph One prior to 0.17.1 and on 2006-12-17, where a format string vulnerability in TopLevelLogger::logMessageV in Misc/Logging.cpp could allow remote attackers to cause an application crash (DoS) or execute arbitrary code. This risk is supported by the NV...

CVE-2006-6669

WebCalendar (v1.0.4 and earlier) is affected by a cross-site scripting (XSS) flaw in export_handler.php that allows an attacker to inject arbitrary script/HTML via the format parameter. The issue has been publicly documented (e.g., CVE-2006-6669; Debian DSA-1279-1) with Debian advising upgrades t...

devhelp, seamonkey security update

CentOS Errata and Security Advisory CESA-2006:0759 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open sour...

tar security update

CentOS Errata and Security Advisory CESA-2006:0749 Updated tar packages that fix a path traversal flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can resto...

CVE-2006-6658

Inktomi Search 4.1.4 allows remote attackers to obtain sensitive information via direct requests with missing parameters to 1 help/header.html, 2 thesaurus.html, and 3 topics.html, which leak the installation path in the resulting error message, a related issue to CVE-2006-5970...

CVE-2006-4814

The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock...

CVE-2006-6645

PHP remote file inclusion vulnerability in language/langenglish/langadmin.php in the Web Links mxlinks 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2006-6647

Cross-site scripting XSS vulnerability in the MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x-1.3 module for Drupal allows remote attackers to inject arbitrary web script or HTML via the Title field when editing a page. NOTE: some details were obtained from third party information...

CVE-2006-6644

This CVE affects the Meeting (mx_meeting) module for mxBB, specifically version 1.1.2 and earlier. The vulnerability is a PHP remote file inclusion in pages/meeting_constants.php that allows a remote attacker to execute arbitrary PHP code by supplying a URL in the module_root_path parameter. Impa...

CVE-2006-6643

Fightersoft Multimedia Star FTP server 1.10 is affected by a remote-denial-of-service vulnerability described as: the server can crash when handling multiple RETR commands with long arguments. This CVE entry (CVE-2006-6643) is documented with an impact of partial availability disruption. The prov...

CVE-2006-6642

SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6650

PHP remote file inclusion vulnerability in chartsconstants.php in the Charts mxcharts 1.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6649

CVE-2006-6649 describes a cross-site scripting (XSS) vulnerability in display.php of HyperVM 1.2 and earlier, exploitable via an encoded frm_action parameter. The weakness is disclosed in the CVE entry, which notes that the vendor disputes the issue and that the dispute could concern severity or ...

CVE-2006-6647

CVE-2006-6647 is a cross-site scripting (XSS) vulnerability affecting the Drupal MySite module. Affected versions are Drupal-based MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x-1.3. The vulnerability arises in the Title field when editing a page, allowing remote attackers to inject arbitrary w...

CVE-2006-6476

CVE-2006-6476 affects Mandiant First Response (FRAgent.exe) prior to version 1.1.1. When run as a daemon and bound to 0.0.0.0 (all interfaces), FRAgent opens sockets in non-exclusive mode, enabling a local attacker to hijack the listening socket and potentially capture data or cause a denial of s...

CVE-2006-6658

The CVE-2006-6658 entry affects Verity Ultraseek/Inktomi Search 4.1.4. The vulnerability allows remote attackers to disclose the installation path by triggering errors from requests to pages such as help/header.html, thesaurus.html, and topics.html when parameters are missing or null-terminated. ...