Author: joeyh
Date: 2006-11-29 21:15:09 +0100 (Wed, 29 Nov 2006)
New Revision: 5025
Modified:
data/CVE/list
Log:
automatic update
Modified: data/CVE/list
==================================================================---
data/CVE/list 2006-11-29 19:05:32 UTC (rev 5024)
+++ data/CVE/list 2006-11-29 20:15:09 UTC (rev 5025)
@@ -1,3 +1,81 @@
+CVE-2006-6168 (tiki-register.php in TikiWiki before 1.9.7 allows remote
attackers to ...)
+ TODO: check
+CVE-2006-6167 (** DISPUTED ** ...)
+ TODO: check
+CVE-2006-6166 (Cross-site scripting (XSS) vulnerability in jce.php in the JCE
Admin ...)
+ TODO: check
+CVE-2006-6165 (** DISPUTED ** ...)
+ TODO: check
+CVE-2006-6164 (The _dl_unsetenv function in loader.c in the ELF ld.so in
OpenBSD 3.9 ...)
+ TODO: check
+CVE-2006-6163 (Cross-site scripting (XSS) vulnerability in tiki-setup_base.php
in ...)
+ TODO: check
+CVE-2006-6162 (Cross-site scripting (XSS) vulnerability in
tiki-edit_structures.php ...)
+ TODO: check
+CVE-2006-6161 (Multiple SQL injection vulnerabilities in Doug Luxem Liberum
Help Desk ...)
+ TODO: check
+CVE-2006-6160 (SQL injection vulnerability in details.asp in Doug Luxem Liberum
Help ...)
+ TODO: check
+CVE-2006-6159 (Multiple cross-site scripting (XSS) vulnerabilities in
newticket.php ...)
+ TODO: check
+CVE-2006-6158 (Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS
Help ...)
+ TODO: check
+CVE-2006-6157 (SQL injection vulnerability in index.php in ContentNow 1.39 and
...)
+ TODO: check
+CVE-2006-6156 (Cross-site scripting (XSS) vulnerability in auth/message.php in
HIOX ...)
+ TODO: check
+CVE-2006-6155 (Multiple SQL injection vulnerabilities in addrating.php in HIOX
Star ...)
+ TODO: check
+CVE-2006-6154 (PHP remote file inclusion vulnerability in addcode.php in HIOX
Star ...)
+ TODO: check
+CVE-2006-6153 (Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net
...)
+ TODO: check
+CVE-2006-6152 (Multiple SQL injection vulnerabilities in vSpin.net Classified
System ...)
+ TODO: check
+CVE-2006-6151 (PHP remote file inclusion vulnerability in centre.php in
Messagerie ...)
+ TODO: check
+CVE-2006-6150 (PHP remote file inclusion vulnerability in ...)
+ TODO: check
+CVE-2006-6149 (SQL injection vulnerability in index.asp in JiRos FAQ Manager
1.0 ...)
+ TODO: check
+CVE-2006-6148 (Multiple cross-site scripting (XSS) vulnerabilities in
submitlink.asp ...)
+ TODO: check
+CVE-2006-6147 (Multiple SQL injection vulnerabilities in JiRos Links Manager
allow ...)
+ TODO: check
+CVE-2006-6146 (Buffer overflow in the HPDF_Page_Circle function in ...)
+ TODO: check
+CVE-2006-6145 (CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials
in ...)
+ TODO: check
+CVE-2006-6144
+ RESERVED
+CVE-2006-6143
+ RESERVED
+CVE-2006-6142
+ RESERVED
+CVE-2006-6141 (Buffer overflow in Tftpd32 3.01 allows remote attackers to cause
a ...)
+ TODO: check
+CVE-2006-6140 (PHP remote file inclusion vulnerability in Sisfo Kampus 2006
(Semarang ...)
+ TODO: check
+CVE-2006-6139 (Directory traversal vulnerability in downloadexcel.php in Sisfo
Kampus ...)
+ TODO: check
+CVE-2006-6138 (Directory traversal vulnerability in download.php in Sisfo
Kampus 0.8 ...)
+ TODO: check
+CVE-2006-6137 (Multiple PHP remote file inclusion vulnerabilities in Sisfo
Kampus 0.8 ...)
+ TODO: check
+CVE-2006-6136 (IBM WebSphere Application Server 6.1.0 before Fix Pack 3
(6.1.0.3) ...)
+ TODO: check
+CVE-2006-6135 (Multiple unspecified vulnerabilities in IBM WebSphere
Application ...)
+ TODO: check
+CVE-2006-6134 (Windows Media 10.00.00.4036 allows remote attackers to cause a
denial ...)
+ TODO: check
+CVE-2006-6133 (Stack-based buffer overflow in Business Objects Crystal Reports
XI ...)
+ TODO: check
+CVE-2006-6132 (Multiple SQL injection vulnerabilities in Link Exchange Lite
allow ...)
+ TODO: check
+CVE-2006-6131 (Untrusted search path vulnerability in (1) WSAdminServer and (2)
...)
+ TODO: check
+CVE-2006-6130 (Apple Mac OS X AppleTalk allows local users to cause a denial of
...)
+ TODO: check
CVE-2006-XXXX [kronolith arbitrary file inclusion]
- kronolith2 2.1.4-1 (bug #400899)
TODO: check kronolith 1.x
@@ -50,8 +128,8 @@
NOT-FOR-US: fipsCMS
CVE-2006-6114 (Buffer overflow in NWSPOOL.DLL in Novell Client 4.91 Post-SP3
for ...)
NOT-FOR-US: Novell
-CVE-2006-6113
- RESERVED
+CVE-2006-6113 (Monkey Boards 0.3.5 allows remote attackers to obtain sensitive
...)
+ TODO: check
CVE-2006-6112
RESERVED
CVE-2006-6111 (Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro
2.0 ...)
@@ -500,8 +578,8 @@
NOT-FOR-US: PhpMyChat
CVE-2006-5897 (Multiple directory traversal vulnerabilities in PhpMyChat Plus
1.9 and ...)
NOT-FOR-US: PhpMyChat Plus
-CVE-2006-5896
- RESERVED
+CVE-2006-5896 (REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain
the ...)
+ TODO: check
CVE-2006-5895 (PHP remote file inclusion vulnerability in core/core.php in
EncapsCMS ...)
NOT-FOR-US: EncapsCMS
CVE-2006-5894 (Directory traversal vulnerability in lang.php in Rama CMS 0.68
and ...)
@@ -812,8 +890,8 @@
RESERVED
CVE-2006-5751
RESERVED
-CVE-2006-5750
- RESERVED
+CVE-2006-5750 (Directory traversal vulnerability in JBoss Application Server
...)
+ TODO: check
CVE-2006-5749
RESERVED
CVE-2006-5748 (Multiple unspecified vulnerabilities in the JavaScript engine in
...)
@@ -832,7 +910,7 @@
- xulrunner <unfixed> (high)
[sarge] - mozilla-firefox <not-affected> (Vulnerable code not present)
- mozilla-thunderbird <removed> (medium)
-CVE-2006-5746 (The console in AirMagnet Enterprise does not properly validate
the ...)
+CVE-2006-5746 (The console in AirMagnet Enterprise before 7.5 build 6307 does
not ...)
NOT-FOR-US: AirMagnet
CVE-2006-5745 (Unspecified vulnerability in the setRequestHeader method in the
...)
NOT-FOR-US: Microsoft
@@ -1060,7 +1138,7 @@
NOT-FOR-US: Web Wiz Forums
CVE-2006-5634 (Multile PHP remote file inclusion vulnerabilities in phpProfiles
2.1 ...)
NOT-FOR-US: phpProfiles
-CVE-2006-5633 (Firefox 1.5.0.7 and 2.0 allows remote attackers to cause a
denial of ...)
+CVE-2006-5633 (Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote
attackers ...)
- firefox <unfixed> (low)
- icedove <unfixed> (low)
- mozilla <unfixed> (low)
@@ -3515,8 +3593,8 @@
RESERVED
CVE-2006-4519
RESERVED
-CVE-2006-4518
- RESERVED
+CVE-2006-4518 (Qbik WinGate 6.1.4 and earlier allows remote attackers to cause
a ...)
+ TODO: check
CVE-2006-4517 (Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a
...)
NOT-FOR-US: Novell iManager
CVE-2006-4516 (Integer signedness error in FreeBSD 6.0-RELEASE allows local
users to ...)
@@ -4302,8 +4380,8 @@
CVE-2006-4182 (Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions
...)
{DSA-1196-1}
- clamav 0.88.5-1 (high; bug #393445)
-CVE-2006-4181
- RESERVED
+CVE-2006-4181 (Format string vulnerability in the sqllog function in the SQL
...)
+ TODO: check
CVE-2006-4180
REJECTED
CVE-2006-4179