ColdFusion MX7 multiple security vulnerabilities

Information leak, crossite scripting protection bypass...

CVE-2006-6123: Undefined Security Weakness

Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...

CVE-2006-5916: Undefined Security Weakness

Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files...

Multiple Cisco Secure Desktop security vulnerabilities

Weak NTFS permissions on installation folder. Protection bypass. Information leak...

pam_ldap protection bypass

It's possible to login into a suspended system account...

Multiple HP System Management Homepage security vulnerabilities

Protection bypass, crossite scripting...

PHP safe_mode glob() protection bypass

glob function allows to check existance of file/directory and build directory listing...

CVE-2006-4436: Undefined Security Weakness

isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations SA with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection...

CVE-2006-4430: Undefined Security Weakness

The Cisco Network Admission Control NAC 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access CCA Agent and bypass local and remote protection mechanisms by modifying 1 the HTTP User-Agent header or 2 the behavior of the TCP/IP stack. NOTE: the vendor has...

Password Safe protection bypass

Password database locking doesn't work under some specific conditions...

FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass the authorization mechanism. This allows the...

Windows Software Restriction Policy Protection Bypass

Windows Software Restriction Policy Protection Bypass Class: Protection bypass Vector: Local Tested on: Windows XP SP2, Windows Server 2003 SP1 Risk: Low Remark: I don't know, what is it - bug or feature, but I can't find any documentation on this issue. Description: Software Restriction Policies...

Secure Elements Class 5 AVR multiple security vulnerabilities

Sensitive information disclosure and spoofing, protection bypass, DoS, unauthorized system access...

Multiple Adobe Document Server for Reader Extensions security vulnerabilities

Protection bypass, crossite scripting, session hijacking...

Multiple Apache Struts application server security vulnerabilities

Protection bypass, crossite scripting, DoS...

CVE-2005-4757: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/" slash servlet root URL pattern, which might allow remote attackers to bypass intended servlet protections...

Enova cryptograpic chip protection bypass

Encryption key is stored in EEPROM...

CVE-2006-0982: Undefined Security Weakness

The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICA...

Multiple Xerox WorkCentre vulnerabilities

Unauthorized access, DoS, crossite scripting, protection bypass...

IRM 014: Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent

---------------------------------------------------------------------- IRM Security Advisory No. 014 Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent Vulnerablity Type / Importance: Security Protection Bypass / High Problem discovered: November 23rd...