CVE-2006-6441

CVE-2006-6441 affects Xerox WorkCentre/WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue allows local users to bypass security controls and boot into Alchemy via certain alternate boot media, demonstrated by a USB thumb drive. The connected s...

CVE-2006-6431

CVE-2006-6431 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify email message signatures via unspecified vectors. The available sources do not specify the root cause, exploit vec...

CVE-2006-6437

CVE-2006-6437 affects Xerox WorkCentre and WorkCentre Pro before versions 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The issue is a denial of service caused by processing a crafted PS file via ops3-dmn, leading to application crash and core dump. The provided documen...

CVE-2006-6436

CVE-2006-6436 affects Xerox WorkCentre and WorkCentre Pro network controllers. The vulnerability enables cross-site scripting via HTTP TRACE messages in affected firmware: 12.050.03.000 and earlier, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. Impact is remote injection of arbitrary ...

CVE-2006-6420

Technical details about CVE-2006-6420 are not provided in the connected documents. The initial description covers XSS in Joomla JCE, but there are no added specifics (products, versions, vectors) in the supplied materials. Monitor for updates.

CVE-2006-6428

CVE-2006-6428 affects Xerox WorkCentre/WorkCentre Pro (pre-12.060.17.000, 13.x before 13.060.17.000, 14.x before 14.060.17.000). The issue allows remote attackers to gain access via unspecified vectors related to browser permissions. Exploitation details are not provided in the connected document...

CVE-2006-6419

CVE-2006-6419 affects Joomla! JCE Admin Component (com_jce) 1.1.0 beta2 and earlier. The vulnerability is a local file include/remote code execution issue in jce.php, where the (1) plugin or (2) file parameter can be used to include arbitrary local files, potentially executing PHP code on the ser...

CVE-2006-6434

The vulnerability CVE-2006-6434 affects Xerox WorkCentre and WorkCentre Pro knockoffs prior to specific version thresholds (12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000). It allows remote attackers to bypass authentication controls via unknown vectors. The underlying ro...

CVE-2006-6427

The CVE-2006-6427 entry concerns Xerox WorkCentre and WorkCentre Pro web UIs affected by command-injection in the WebUI. Affected versions are before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows remote attackers to execute arbitrary commands vi...

CVE-2006-6441

Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive...

CVE-2006-6415

CVE-2006-6415 describes a remote file inclusion risk in phpAdsNew 2.0.4-pr2, involving admin/lib-maintenance.inc.php and the phpAds_path parameter. Exploitation would allow remote PHP code execution via a URL. The issue is noted as disputed by CVE, since phpAds_path is used as a constant. Connect...

CVE-2006-6440

The CVE-2006-6440 entry concerns Xerox WorkCentre / WorkCentre Pro devices. Affected products include Xerox WorkCentre models with versions before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. The vulnerabilities are described as multiple unspecified issues that permit ...

CVE-2006-6418

CVE-2006-6418 refers to a buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX, affecting 4.0F PK8, 4.0G PK4, and 5.1A PK6. The vulnerability arises from a long PTHREAD_CONFIG environment variable and allows local users to gain root privileges. This is a local-privilege-esca...

CVE-2006-6438

CVE-2006-6438 affects Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000. After an Immediate Image Overwrite (IIO), the system leaves sensitive user data in http.log, which local users can read to obtain the data. Public sources in t...

CVE-2006-6415

PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAdspath is used as a...

CVE-2006-6413

The CVE-2006-6413 issue affects Amateras sns (Shobo Shobo Nikki System) up to version 3.11, with a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary scripts/HTML via unspecified vectors. The JVN entry confirms the vulnerability and notes the impact as arbit...

CVE-2006-6419

jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor JCE 1.1.0 beta 2 and earlier for Joomla! comjce allows remote attackers to include and possibly execute arbitrary local files via the 1 plugin or 2 file parameter. NOTE: The provenance of this information is unknown; the...

CVE-2006-6421

CVE-2006-6421 is an XSS in phpBB 2.0.x; the private messaging (privmsg.php) feature allows remote authenticated users to inject arbitrary script/HTML via the Message body when targeting a non-existent user. Affected component: phpBB 2.0.x private messaging; root cause is user-supplied input not s...

CVE-2006-6416

PhpLeague - Univert PhpLeague 0.81 contains multiple PHP remote file inclusion vulnerabilities. The issue is triggered by a crafted URL provided in the cheminmini parameter to either consult/miniseul.php or config.php, enabling an attacker to indirectly affect the system by including remote PHP f...

CVE-2006-6430

CVE-2006-6430 affects Xerox WorkCentre/WorkCentre Pro before versions 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000; these web services do not require HTTPS, allowing remote attackers to sniff unencrypted HTTP traffic and obtain sensitive information. Remediation is to u...