3600 matches found
CVE-2006-0552
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln DB11...
CVE-2006-0498
Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...
CVE-2005-4701
CVE-2005-4701 concerns an unspecified vulnerability in Sun Solaris 10’s Process File System (procfs) that could allow local users to obtain sensitive information such as process working directories via unknown attack vectors (possibly pwdx). The NVD/related records assign a low base score (CVSSv2...
CVE-2006-0442
Multiple cross-site scripting XSS vulnerabilities in usercp.php in MyBulletinBoard MyBB 1.02 allow remote attackers to inject arbitrary web script or HTML via the 1 notepad parameter in a notepad action and 2 signature parameter in an editsig action. NOTE: These are different attack vectors, and...
CVE-2006-0436
Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors...
CVE-2006-0431
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors...
Code injection
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors...
CVE-2006-0422
CVE-2006-0422 affects BEA WebLogic Server and WebLogic Express (versions 8.1–SP4, 7.0–SP6, 6.1–SP7). The issue enables remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors. The provided documents do not specify the root cause details, at...
CVE-2006-0431
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors...
CVE-2005-3628
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors...
CVE-2006-0351
Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors...
CVE-2006-0351
Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors...
Denial of service
Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors...
CVE-2006-0348
Format string vulnerability in the writelogfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service server crash via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Code injection
Multiple unspecified vulnerabilities in the 1 publishing component, 2 Contact Component, 3 TinyMCE Compressor, and 4 other components in Joomla! 1.0.5 and earlier have unknown impact and attack vectors...
Design/Logic Flaw
Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23L1 has unspecified impact and attack vectors, as identified by Oracle Vuln JDE01...
Design/Logic Flaw
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS13 and 2 APPS14 in the Oracle iLearning component...
CVE-2006-0278
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS02 in the a CRM Technical Foundation component; 2 APPS03 in the b iProcurement component; and 3 APPS04, 4 APPS05, and 5 APPS06 in...
CVE-2006-0284
Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, have unspecified impact and attack vectors, as identified by Oracle Vuln 1 FORM01 and 2 FORM02 in the Oracle Forms component...