CVE-2006-5961

Buffer overflow in Mercury Mail Transport System 4.01b for Windows has unknown impact and attack vectors, as originally reported in a GLEG VulnDisco pack. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The original researcher is reliabl...

CVE-2006-5937

Multiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to execute arbitrary code via crafted 1 CAB or 2 RAR archives that trigger a heap-based buffer overflow. NOTE: some of these details are obtained from third party information...

MODx CMS base_path Parameter Remote File Inclusion

The remote web server is running MODx CMS, an open source content management system. The version of MODx CMS installed on the remote host fails to sanitize input to the 'basepath' parameter before using it in the 'manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php' script to includ...

CVE-2006-5800

Cross-site scripting XSS vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Linux Kernel ATM SkBuff Dereference Remote Denial of Service Vulnerability

这个问题是在Kernel处理输入ATM（异步传输模式）数据时被触发。 利用这个漏洞，攻击者可以目标Kernel死机，导致拒绝服务的发生。 本问题只影响那些具有ATM硬件并且配置成支持ATM的Kernel的系统。 Kernel版本从2.6.0到2.6.17（包括2.6.17）都受到该漏洞影响。 PHP 5 受此漏洞影响。 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Operating System Enterprise Server 2.0 RedHat Enterprise Linux WS 4 RedHat...

CVE-2006-5745

Unspecified vulnerability in the setRequestHeader method in the XMLHTTP XML HTTP ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a differe...

Apple Mac OS X多个安全漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 最新的Mac OS X更新修复了多个漏洞，具体如下： CVE-2006-1472 AFP Server中的漏洞允许在搜索结果中包含执行搜索用户无权访问的文件和文件夹。如果文件名本身就是敏感信息的话，就可能导致信息泄露；如果权限允许的话，攻击者还可以访问文件内容。 CVE-2006-1473 已认证用户可以触发AFP Server中的整数溢出漏洞，导致拒绝服务或以系统权限执行任意代码。AFP Server在Mac OS X中不是默认启用的。 CVE-2006-3495 在Mac OS X Server上，AFP...

CVE-2006-5530

Multiple cross-site scripting XSS vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 admin/index.php, 2 admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown;...

CVE-2006-5549

PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHPBASE parameter. NOTE: this issue has been disputed by a third-party researcher who states that AMFPHPBASE is a constan...

CVE-2006-5423

PHP remote file inclusion vulnerability in admin/adminmodule.php in Lou Portail 1.4.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the gadminrep parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

DRUPAL-SA-2006-026 - Drupal core - Form action attribute injection

A malicious user may entice users to visit a specially crafted URL that may result in the redirection of Drupal form submission to a third-party site. A user visiting the user registration page via such a url, for example, will submit all data, such as his/her e-mail address, but also possible...

CVE-2006-5303

Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading 1 base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and 2 plaintext data in SERVERS\Shared\signers.cfg. NOTE: the...

CVE-2006-5303

CVE-2006-5303 affects Secure Computing SafeWord RemoteAccess 2.1. The vulnerability allows local users to obtain sensitive credentials by reading (1) base-64 data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and (2) plaintext data in SERVERS\Shared\signers.cfg. The provenance of the inform...

CVE-2006-5291

PHP remote file inclusion vulnerability in admin/includes/spaw/spawcontrol.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PH...

CVE-2006-3978

The CVE-2006-3978 entry covers an unspecified vulnerability in a Verity third‑party library used by Adobe ColdFusion MX 7 through MX 7.0.2 (and possibly other products). The vulnerability is described as allowing local users to execute arbitrary code via unknown attack vectors, i.e., a local priv...

CVE-2006-5035

Multiple cross-site scripting XSS vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the statusmsg parameter in RegisterPage.cgi or 2 a URI corresponding to a nonexistent file. NOTE: the provenance of this information is...

CVE-2006-4914

Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences in the zelangue02 cookie, as demonstrated by using the choixlng parameter to choixlangue.php to indirectly set the cookie, then accessing livredor.php to trigger the inclusion...