CVE-2006-3718

Multiple unspecified vulnerabilities in Oracle Exchange for Oracle E-Business Suite and Applications 6.2.4 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS16 and 2 APPS17...

CVE-2006-3720

Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln EM02...

CVE-2006-3701

Unspecified vulnerability in the Dictionary component in Oracle Database 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln DB05...

CVE-2006-3706

Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 has unknown impact and attack vectors, aka Oracle Vuln AS01...

CVE-2006-3715

Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln OCS01...

CVE-2006-3722

Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle 16, 8.8 Bundle 10, and 8.9 Bundle 3 has unknown impact and attack vectors, aka Oracle Vuln PSE01...

CVE-2006-3717

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln 1 APPS03 and 2 APPS04 for Oracle Application Object Library; and 3 APPS20 for Oracle XML Gateway...

CVE-2006-3698

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln 1 DB01 for Change Data Capture CDC component and 2 DB03 for Data Pump Metadata API. NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB01 is...

CVE-2006-3702

Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle Vuln 1 DB06 in Export; 2 DB08, 3 DB09, 4 DB10, 5 DB11, 6 DB12, 7 DB13, 8 DB14, and 9 DBC01 for OCI; 10 DB16 for Query Rewrite/Summary Mgmt; ...

CVE-2006-3630

CVE-2006-3630 concerns off-by-one errors in Wireshark/Ethereal dissectors (NCP NMAS and NDPS) affecting versions 0.9.7 through 0.99.0. Connected sources corroborate existence of multiple Ethernet dissector flaws in Wireshark/Ethereal history, including off-by-one issues in NCP NMAS/NDPS, and note...

CVE-2006-3630

Multiple off-by-one errors in Wireshark aka Ethereal 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the 1 NCP NMAS and 2 NDPS dissectors...

CVE-2006-3667

Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors...

CVE-2006-3667

Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors...

CVE-2006-3660

CVE-2006-3655, CVE-2006-3656, CVE-2006-3590 describe a family of remote-code-execution/memory-corruption vulnerabilities in Microsoft PowerPoint 2003 tied to PowerPoint files. Specifically, CVE-2006-3590 (PowerPoint Mso.dll) is triggered by parsing a malformed PowerPoint file, allowing arbitrary ...

Microsoft Office Malformed String Parsing Code Execution Vulnerability

Description Microsoft Office is prone to a code-execution vulnerability. This condition can occur when a malformed string within an Office file is parsed. This vulnerability is located in a shared library used by multiple Office applications, potentially allowing many different attack vectors. An...

CVE-2006-3308

CVE-2006-3308 affects the wpprop component of Project EROS bbsengine prior to 20060622-0315. The vulnerability’s impact is not clearly quantified in the provided documents, but remote attack vectors via [img] tags are noted with a possible cross-site scripting (XSS) effect. The NVD entry assigns ...

CVE-2006-3308

Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via img tags, possibly cross-site scripting XSS...

CVE-2006-3257

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...

CVE-2006-2196

Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges...

CVE-2006-2196

Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges...