Skip to content
OpenAdvisories

Archive

7 September 2006

Vulnerabilities first published on this day (UTC), newest first.

← August 2006 2006 / September /7 October 2006 →
  1. 112
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 641
  7. 732
  8. 823
  9. 922
  10. 10 
  11. 1115
  12. 1234
  13. 1344
  14. 1437
  15. 1527
  16. 16 
  17. 17 
  18. 18 
  19. 1962
  20. 201
  21. 2123
  22. 224
  23. 2331
  24. 24 
  25. 2515
  26. 2620
  27. 2753
  28. 2823
  29. 2929
  30. 30 
All Critical High Medium Low Exploited only Public exploit

32 results · Feed

  • Unscored —
    CVE-2006-4627 EPSS 14%

    System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers…

  • Unscored —
    CVE-2006-4626

    Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-4624

    CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the er…

  • Unscored —
    CVE-2004-2664

    John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests …

    phppgadmin Debian
  • Unscored —
    CVE-2006-4617

    Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows re…

  • Unscored —
    CVE-2006-4610 Public exploit

    PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, …

  • Unscored —
    CVE-2006-4602 Public exploit EPSS 44%

    Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2006-4597 Public exploit

    SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-4605 Public exploit

    PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to exe…

  • Unscored —
    CVE-2006-4609 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0…

  • Unscored —
    CVE-2006-4607 Public exploit

    admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by settin…

  • Unscored —
    CVE-2006-4621

    PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to …

  • Unscored —
    CVE-2006-4622 Public exploit

    PHP remote file inclusion vulnerability in annonce.php in AnnonceV (aka annoncesV) 1.1 allows remote attackers to execu…

  • Unscored —
    CVE-2006-4598

    Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-4603

    NCH Swift Sound Web Dictate 1.02 allows remote attackers to bypass authentication via a null password.

  • Unscored —
    CVE-2006-4608 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to injec…

  • Unscored —
    CVE-2006-4604 Public exploit

    PHP remote file inclusion vulnerability in LFXlib/access_manager.php in Lanifex Database of Managed Objects (DMO) 2.3 B…

  • Unscored —
    CVE-2006-4620

    The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allo…

  • Unscored —
    CVE-2006-4613

    Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via…

  • Unscored —
    CVE-2006-4599 Public exploit

    SQL injection vulnerability in aut_verifica.inc.php in Autentificator 2.01 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-4596 Public exploit

    PHP remote file inclusion in MyBace Light Skrip, when register_globals is enabled, allows remote attackers to execute a…

  • Unscored —
    CVE-2006-4618

    PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as use…

  • Unscored —
    CVE-2006-4612 Public exploit

    SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-4611 Public exploit

    Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-4606 Public exploit

    Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-4601 Public exploit

    SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2006-4619

    The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain…

  • Unscored —
    CVE-2006-4600

    slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges t…

  • Unscored —
    CVE-2006-4616

    SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to…

  • Unscored —
    CVE-2006-4615

    Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMF…

  • Unscored —
    CVE-2006-4595

    muforum (µforum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which al…

  • Unscored —
    CVE-2006-4614

    PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which…