CVE-2006-2630

Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors...

CVE-2006-2590

SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2006-2517

SQL injection vulnerability in MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

CVE-2006-2260

Cross-site scripting XSS vulnerability in the project module project.module in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

Design/Logic Flaw

Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors...

Cross site scripting

Multiple "unannounced" cross-site scripting XSS vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1064

Multiple cross-site scripting XSS vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

CVE-2006-1035

Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors...

Security feature bypass

Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors...

Information disclosure

CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information...

CVE-2005-4701

CVE-2005-4701 concerns an unspecified vulnerability in Sun Solaris 10’s Process File System (procfs) that could allow local users to obtain sensitive information such as process working directories via unknown attack vectors (possibly pwdx). The NVD/related records assign a low base score (CVSSv2...

CVE-2006-0431

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors...

CVE-2006-0431

Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors...

Code injection

Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors...

CVE-2005-4707

Multiple cross-site scripting XSS vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors...

security flaw

Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors...

CVE-2004-2639

Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors...

CVE-2005-3904

Unspecified vulnerability in Java Management Extensions JMX in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors...

security flaw

Unknown vulnerability in the BER dissector in Ethereal 0.10.11 allows remote attackers to cause a denial of service abort or infinite loop via unknown attack vectors...

CVE-2005-2361

Unknown vulnerability in the 1 AgentX dissector, 2 PER dissector, 3 DOCSIS dissector, 4 SCTP graphs, 5 HTTP dissector, 6 DCERPC, 7 DHCP, 8 RADIUS dissector, 9 Telnet dissector, 10 IS-IS LSP dissector, or 11 NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial...