5 September 2006

9 results · Feed

• Unscored —
  CVE-2006-4540 Public exploit

  Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject …

  Sep 5, 2006
• Unscored —
  CVE-2006-4541 Public exploit

  RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a de…

  Sep 5, 2006
• Unscored —
  CVE-2006-4539

  (1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center…

  Sep 5, 2006
• Unscored —
  CVE-2006-4542

  Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows r…

  Sep 5, 2006
• Unscored —
  CVE-2006-4538

  Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of servi…

  Sep 5, 2006
• Unscored —
  CVE-2006-4536 Public exploit

  SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute …

  Sep 5, 2006
• Unscored —
  CVE-2006-4537

  NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when…

  Sep 5, 2006
• Critical 9.1
  CVE-2006-4339

  Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

  A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.5…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian
  Sep 5, 2006
• Unscored —
  CVE-2006-4534 EPSS 34%

  Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execut…

  Sep 5, 2006