CVE-2006-1048

Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certain attack vectors related to the 1 Weblink, 2 Polls, 3 Newsfeeds, 4 Weblinks, 5 Content, 6 Content Section, 7 Content Category, 8 Contact items, or 9 Contact Search, 10 Content...

CVE-2006-1035

Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors...

CVE-2006-0979

Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via 1 HTML tags that follow a "http://" string, which bypasses a regular expression check, and 2 other unspecified attack...

Design/Logic Flaw

Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to "reduce effectiveness of security features" via unknown attack vectors...

Information disclosure

CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information...

Security feature bypass

Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the 1 Filesystem in USErspace FUSE client and 2 NOOFS daemon in in Network Object Oriented File System NOOFS before 0.9.0 have unspecified impact and attack vectors...

CVE-2006-0672

CVE-2006-0672 concerns the HP PSC 1210 All-in-One Drivers prior to version 1.0.06. The description characterizes the vulnerability as unspecified with unknown impact and attack vectors; no specific root cause, affected components beyond the driver set, or remediation is provided in the documents....

CVE-2006-0608

Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to check.php or 2 unknown attack vectors to scripts that display information from the database...

Design/Logic Flaw

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln DB11...

CVE-2006-0552

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln DB11...

CVE-2006-0498

Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2005-4701

CVE-2005-4701 concerns an unspecified vulnerability in Sun Solaris 10’s Process File System (procfs) that could allow local users to obtain sensitive information such as process working directories via unknown attack vectors (possibly pwdx). The NVD/related records assign a low base score (CVSSv2...

CVE-2006-0442

Multiple cross-site scripting XSS vulnerabilities in usercp.php in MyBulletinBoard MyBB 1.02 allow remote attackers to inject arbitrary web script or HTML via the 1 notepad parameter in a notepad action and 2 signature parameter in an editsig action. NOTE: These are different attack vectors, and...

CVE-2006-0436

Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors...

Code injection

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors...

CVE-2006-0431

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors...

CVE-2006-0422

CVE-2006-0422 affects BEA WebLogic Server and WebLogic Express (versions 8.1–SP4, 7.0–SP6, 6.1–SP7). The issue enables remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors. The provided documents do not specify the root cause details, at...