CVE-2006-3974

Cross-site scripting XSS vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter...

Winamp < 5.34 Malformed 'PLS' File Handling DoS

Binary data 3974.prm...

[SECURITY] [DSA 958-1] New drupal packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 958-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2006 http://www.debian.org/security/faq -...

CVE-2005-3974

Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission...

CVE-2005-3974

Drupal 4.5.0–4.5.5 and 4.6.0–4.6.3 on PHP5 do not correctly enforce user privileges, allowing remote attackers to bypass the access user profiles permission (CVE-2005-3974). The advisories note a fix in 4.6.3 (and related Debian updates in DSA-958-1), with older fixed versions for sid/stable tree...

CVE-2005-3974

Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission...