CVE-2005-4749

HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors...

CVE-2006-1540

Mode C: The CVE-2006-1540 issue affects Microsoft Office 2000, XP (2002), and 2003. It stems from a memory corruption vulnerability caused by malformed strings in Office Document files, enabling user‑assisted execution of arbitrary code and potential denial of service when opening crafted Excel, ...

Full path disclosure in Webcalendar 1.1.0-CVS

Full path disclosure in webcalendar Author : Rusydi Hasan M a.k.a : cR45H3R Location : Indonesia, Cilacap Date : March,28th 2006 Version : 1.1.0-CVS --- software description WebCalendar is a PHP application used to maintain a calendar for one or more persons and for a variety of purposes. ---...

CVE-2006-1394

Multiple cross-site scripting XSS vulnerabilities in the Microsoft IIS ISAPI filter aka application server module in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vecto...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Microsoft IIS ISAPI filter aka application server module in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vecto...

CVE-2006-1394

Multiple cross-site scripting XSS vulnerabilities in the Microsoft IIS ISAPI filter aka application server module in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vecto...

CVE-2002-2209

CVE-2002-2209 concerns an unspecified security vulnerability in Baby FTP Server versions before November 7, 2002 . The description provides no details on the root cause, exploit vector, or exact impact, only noting an unknown impact and attack vectors. The NVD entry lists a high base score (10.0)...

CVE-2006-1325

Cross-site scripting XSS vulnerability in Streber 0.055 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

Sql injection

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors...

Cross site scripting

Multiple "unannounced" cross-site scripting XSS vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1262

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors...

CVE-2006-1262

Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...

CVE-2006-1250

Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...

Information disclosure

Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1250

Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...

CVE-2005-4730

Unspecified vulnerability in PEAR TextPassword 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable seeds...

Integer overflow

Integer overflow in the machmsgsend function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow...

CVE-2006-0557

sysmbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the getnodes function, which has unknown impact and attack vectors...

CVE-2006-0557

sysmbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the getnodes function, which has unknown impact and attack vectors...