14476 matches found
CVE-2006-5039
Unspecified vulnerability in Events 1.3 beta module comevents for Joomla! has unspecified impact and attack vectors...
CVE-2006-7238
Cross-site scripting XSS vulnerability in MyShoutPro before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-7241
The Image Viewer component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is denied all permissions for an annotation, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances...
CVE-2006-7242
The Workplace aka WP component in IBM FileNet P8 Application Engine P8AE 3.5.1 before 3.5.1-001 does not ensure that the AE Administrator role is present for Site Preferences modifications, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors...
CVE-2006-6657
The ifclonelist function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read potentially sensitive, uninitialized stack memory via unspecified vectors...
CVE-2006-7218
eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy...
CVE-2006-7186
cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and other functions," a different vulnerability than CVE-2005-0927...
CVE-2006-7184
Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine EE 1.22, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to 1 fetchsettings.php or 2 fstyles.php. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-7167
Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for remote login via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7000
Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to 1 email/mail.php, 2 includes/init.php, 3 certain files in includes/cron/, and 4 jpgraph.php, 5 jpgraphbar.php, 6 jpgraphpie.php, and 7 jpgraphpie3d.php in includes/graph/, which leaks the path in...
CVE-2006-10001
A vulnerability, which was classified as problematic, was found in Subscribe to Comments Plugin up to 2.0.7 on WordPress. This affects an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading t...
CVE-2006-5393
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10274...
CVE-2006-6025
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10269...
CVE-2006-6024
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10267...
CVE-2006-6017
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10264...
CVE-2006-6016
creationtimestamp| type| source ---|---|--- 2025-04-03 16:34:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10259...
CVE-2006-5014
creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10252...
CVE-2006-5738
creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10247...