CVE-2006-6654

The CVE covers a vulnerability in NetBSD where the sendmsg path on 64-bit architectures can panic the kernel due to an invalid msg_controllen passed to sendit. Affected are NetBSD-current prior to 20061023, NetBSD 3.0 and 3.0.1 prior to 20061024, and NetBSD 2.x prior to 20061029. The issue is a d...

CVE-2006-6650

PHP remote file inclusion vulnerability in chartsconstants.php in the Charts mxcharts 1.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...

CVE-2006-6644

This CVE affects the Meeting (mx_meeting) module for mxBB, specifically version 1.1.2 and earlier. The vulnerability is a PHP remote file inclusion in pages/meeting_constants.php that allows a remote attacker to execute arbitrary PHP code by supplying a URL in the module_root_path parameter. Impa...

CVE-2006-5681

CVE-2006-5681 affects QuickTime for Java on Mac OS X 10.4–10.4.8 when used with Quartz Composer. A Java applet can access images rendered by other embedded QuickTime objects, allowing remote attackers to obtain sensitive screen images (confidentiality impact: partial). Root cause: Java applet lea...

CVE-2006-6475

CVE-2006-6475 affects Mandiant First Response (FRAgent.exe) prior to version 1.1.1 in daemon/SSL mode. The vulnerability is a denial-of-service condition: remotely sending malformed requests to an SSL-enabled daemon can trigger an unhandled exception, causing sockets to reach an indefinite CLOSE_...

CVE-2006-6653

The CVE affects NetBSD: the accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket exhaustion) via an invalid (1) name or (2) namelen parameter, which may result in a socket ne...

CVE-2006-6657

The CVE-2006-6657 entry describes a local memory disclosure in NetBSD: the if_clone_list function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 can allow local users to read potentially sensitive, uninitialized stack memory via unspecified...

CVE-2006-6655

NetBSD procfs vulnerability (CVE-2006-6655): Local users can trigger a kernel panic by reading /emul/linux/proc/0/stat on a procfs mounted with mount_procfs -o linux. A NULL pointer dereference occurs in affected kernels (NetBSD-current before 20061023; NetBSD 3.0/3.0.1 before 20061024; NetBSD 2....

CVE-2006-6651

CVE-2006-6651 describes a race condition in the Intel 2200BG wireless driver 9.0.3.9 (W29N51.SYS) that can allow remote attackers to cause memory corruption and execute arbitrary code by sending crafted beacon frames. The description notes that some details come from third‑party information. Conn...

CVE-2006-6651

Race condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers to cause memory corruption and execute arbitrary code via a series of crafted beacon frames. NOTE: some details are obtained solely from third party information...

CVE-2006-6652

CVE-2006-6652 describes a buffer overflow in the glob implementation (glob.c) of libc used by the FTP daemon tnftpd, affecting NetBSD-current (before 20050914), NetBSD 2.* and 3.* before 20061203, and Mac OS X before 2007-004. A long pathname resulting from path expansion can allow remote authent...

CVE-2006-6645

The CVE-2006-6645 entry documents a PHP remote file inclusion in the Web Links (mx_links) 2.05 and earlier module for mxBB. The vulnerability arises from an attacker-controlled URL in the mx_root_path parameter within language/lang_english/lang_admin.php, allowing arbitrary PHP code execution on ...

CVE-2006-6646

CVE-2006-6646 : This entry covers multiple cross-site scripting (XSS) vulnerabilities in Drupal projects. Affected are Drupal modules: Project Issue Tracking (versions 4.7.x-1.0, 4.7.x-2.0) and Project (versions 4.6.x-1.0, 4.7.x-1.0, 4.7.x-2.0). The issue arises from parameters that do not use th...

CVE-2006-6477

CVE-2006-6477 concerns Mandiant First Response (MFR) prior to 1.1.1. The issue arises when the FRAgent daemon runs with HTTP (and also in SSL mode as per Symantec advisory) and binds non-exclusively to a socket, enabling a local attacker to hijack the agent and conduct a man-in-the-middle attack ...

CVE-2006-6650

CVE-2006-6650 affects the mxBB Charts (mx_charts) module, version 1.0.0 and earlier. The vulnerability is a PHP remote file inclusion in charts_constants.php that lets an attacker supply a URL via the module_root_path parameter to execute arbitrary PHP code on the server. This corresponds to a ne...

CVE-2006-6500

Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by setting the CSS cursor to certain images that cause an...

CVE-2006-6502

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service crash via unknown vectors...

CVE-2006-6507

Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting XSS protection via vectors related to a Function.prototype regression error...

CVE-2006-6506

The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when requesting favicon.ico icons, which results in a privacy leak that might allow feed viewing services to determine browsing habits...

CVE-2006-6504

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption...