CVE-2006-6683: Undefined Security Weakness

Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM...

CVE-2006-6636: Undefined Security Weakness

Unspecified vulnerability in the Utility Classes for IBM WebSphere Application Server WAS before 5.1.1.13 and 6.x before 6.0.2.17 has unknown impact and attack vectors...

CVE-2006-6515: Undefined Security Weakness

Mantis before 1.1.0a2 sets the default value of $gbugreminderthreshold to "reporter" instead of a more privileged role, which has unknown impact and attack vectors, possibly related to frequency of reminders...

CVE-2006-6428: Undefined Security Weakness

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allow remote attackers to gain access via unspecified vectors related to "browser permissions."...

CVE-2006-6294: Undefined Security Weakness

Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. NOTE: this might be related to CVE-2006-6293, but it is not clear due to the vagueness of the report...

CVE-2006-5978: Undefined Security Weakness

Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some security fix."...

CVE-2006-5912: Undefined Security Weakness

Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords...

CVE-2006-5809: Undefined Security Weakness

Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors...

CVE-2006-5709: Undefined Security Weakness

Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."...

CVE-2006-5364: Undefined Security Weakness

Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote authenticated attack vectors, aka Vuln OC4J05...

CVE-2006-5370: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln 1 APPS06 for Oracle CRM Gateway for Mobile Devices and 2 APPS08 for Oracle iStore...

CVE-2006-5238: Undefined Security Weakness

Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...

CVE-2006-5160: Undefined Security Weakness

Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006. NOTE: the vendor and original researchers have released a follow-up comment disputing this issue, in which one researcher states that "I have no undisclosed Firefox...

CVE-2006-5041: Undefined Security Weakness

Unspecified vulnerability in Hot Properties possibly comhotproperties 0.97 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5049: Undefined Security Weakness

Unspecified vulnerability in Classifieds comclassifieds component 1.3 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5026: Undefined Security Weakness

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner sHTTPScanner before 0.3 have unknown impact and attack vectors...

CVE-2006-5046: Undefined Security Weakness

Unspecified vulnerability in RS Gallery2 comrsgallery2 1.11.3 and earlier for Joomla! has unspecified impact and attack vectors, related to lack of "hardened language files."...

CVE-2006-5024: Undefined Security Weakness

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner sHTTPScanner before 0.4 have unknown impact and attack vectors...

CVE-2006-4996: Undefined Security Weakness

Unspecified vulnerability in JoomlaLib comjoomlalib before 1.2.2 for Joomla! allows remote attackers to have an unknown impact, related to "Joomla globals hacked by script kiddies."...

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution

Apple QuickTime 7.1.3 PlugIn - Arbitrary Script Execution source: https://www.securityfocus.com/bid/20138/info Apple QuickTime plug-in is prone to an arbitrary-script-execution weakness when executing QuickTime Media Link files .qtl. An attacker can exploit this issue to execute arbitrary script...