DEBIAN-CVE-2006-6503

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting XSS protection by changing the src attribute of an IMG element to a javascript: URI...

CVE-2006-6507

The CVE-2006-6507 issue affects Mozilla Firefox 2.0 prior to 2.0.0.1, where a regression in Function.prototype allows remote XSS protection bypass. Public advisories (SUSE/Ubuntu) indicate fixes in newer Firefox releases (2.0.0.1 or later). Remediation guidance: upgrade Firefox to 2.0.0.1+ (or ap...

CVE-2006-6503: Undefined Security Weakness

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting XSS protection by changing the src attribute of an IMG element to a javascript: URI...

ColdFusion MX7 multiple security vulnerabilities

Information leak, crossite scripting protection bypass...

Winamp Web Interface multiplse security vulnerabilities

Buffer overflows, directory traversal and protection bypass...

CVE-2006-6123: Undefined Security Weakness

Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...

CVE-2006-5916: Undefined Security Weakness

Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files...

Multiple Cisco Secure Desktop security vulnerabilities

Weak NTFS permissions on installation folder. Protection bypass. Information leak...

pam_ldap protection bypass

It's possible to login into a suspended system account...

Multiple HP System Management Homepage security vulnerabilities

Protection bypass, crossite scripting...

PHP safe_mode glob() protection bypass

glob function allows to check existance of file/directory and build directory listing...

CVE-2006-4430: Undefined Security Weakness

The Cisco Network Admission Control NAC 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access CCA Agent and bypass local and remote protection mechanisms by modifying 1 the HTTP User-Agent header or 2 the behavior of the TCP/IP stack. NOTE: the vendor has...

CVE-2006-4436: Undefined Security Weakness

isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations SA with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection...

Password Safe protection bypass

Password database locking doesn't work under some specific conditions...

FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass the authorization mechanism. This allows the...

Windows Software Restriction Policy Protection Bypass

Windows Software Restriction Policy Protection Bypass Class: Protection bypass Vector: Local Tested on: Windows XP SP2, Windows Server 2003 SP1 Risk: Low Remark: I don't know, what is it - bug or feature, but I can't find any documentation on this issue. Description: Software Restriction Policies...

Secure Elements Class 5 AVR multiple security vulnerabilities

Sensitive information disclosure and spoofing, protection bypass, DoS, unauthorized system access...

Multiple Adobe Document Server for Reader Extensions security vulnerabilities

Protection bypass, crossite scripting, session hijacking...

Multiple Apache Struts application server security vulnerabilities

Protection bypass, crossite scripting, DoS...

CVE-2005-4757: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/" slash servlet root URL pattern, which might allow remote attackers to bypass intended servlet protections...