4982 matches found
CVE-2006-4959
Sun Secure Global Desktop SSGD, aka Tarantella before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving 1 taarchives.cgi, 2 ttaAuthentication.jsp, 3 ttalicense.cgi, 4 ttawlogin.cgi, 5...
CVE-2006-4949
Cross-site scripting XSS vulnerability in the Drupal 4.6 Site Profile Directory profilepages.module before 1.1.2.1 and the Drupal 4.7 Site Profile Directory profilepages.module before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack o...
Format string
DISPUTED Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable."...
CVE-2006-2191
Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable...
CVE-2006-4640
Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors...
CVE-2006-4717
The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors...
CVE-2006-4522
Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors...
CVE-2006-4508
Unspecified vulnerability in 1 Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and 2 ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service flood via unspecified vectors...
CVE-2006-4506
idmlib.sh in nxdrv in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " quote and \ backslash characters and eval injection...
CVE-2006-4460
Cross-site scripting XSS vulnerability in PHP iAddressBook before 0.96 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4331
Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark formerly Ethereal 0.99.2 allow remote attackers to cause a denial of service crash via unspecified vectors...
CVE-2006-4187
HP-UX vulnerability CVE-2006-4187 affects HP-UX B.11.00, B.11.11 and B.11.23 when running in Trusted Mode, allowing a local authorized user to cause a Denial of Service via unspecified vectors. Related Nessus patches (PHCO_34214/34215/34806) address DoS in Trusted Mode with libpam_unix components...
CVE-2006-4165
Cross-site scripting XSS vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-4109
Cross-site scripting XSS vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-3451
Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets CSS, which allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2006-3924
Multiple cross-site scripting XSS vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-3908
Format string vulnerability in the flushoutput function in ConsoleStreambuf.cpp in Game Network Engine GNE 0.70 and earlier allows remote attackers to cause a denial of service crash and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console...
PYSEC-2006-2
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text reStructuredText functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting XSS attacks, or cause a denial of service via...
