9 September 2006

22 results · Feed

• Unscored —
  CVE-2006-4650

  Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not ve…

  Sep 9, 2006
• Unscored —
  CVE-2006-4667

  Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the…

  Sep 9, 2006
• Unscored —
  CVE-2006-4666 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attac…

  Sep 9, 2006
• Unscored —
  CVE-2006-4661

  AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web…

  Sep 9, 2006
• Unscored —
  CVE-2006-4656 Public exploit EPSS 11%

  PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier…

  Sep 9, 2006
• High 7.8
  CVE-2006-4663

  The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissio…

  Sep 9, 2006
• Unscored —
  CVE-2006-4659

  The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification …

  Sep 9, 2006
• Unscored —
  CVE-2006-4669 Public exploit

  PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals …

  Sep 9, 2006
• Unscored —
  CVE-2006-4670 Public exploit EPSS 10%

  Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to exec…

  Sep 9, 2006
• Unscored —
  CVE-2006-4662

  Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote at…

  Sep 9, 2006
• Unscored —
  CVE-2006-4651

  Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakm…

  Sep 9, 2006
• Unscored —
  CVE-2006-4653

  (1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insuffi…

  Sep 9, 2006
• Unscored —
  CVE-2006-4658

  Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that…

  Sep 9, 2006
• Unscored —
  CVE-2006-4664 Public exploit

  PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remo…

  Sep 9, 2006
• Unscored —
  CVE-2006-4294 Public exploit

  Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary fi…

  Sep 9, 2006
• Unscored —
  CVE-2006-4665

  Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary …

  Sep 9, 2006
• Unscored —
  CVE-2006-4654 Public exploit

  Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (c…

  Sep 9, 2006
• Unscored —
  CVE-2006-4652

  (1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of "dsapoll", which allows remote a…

  Sep 9, 2006
• Unscored —
  CVE-2006-4657

  Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's install…

  Sep 9, 2006
• Unscored —
  CVE-2006-4660

  Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer…

  Sep 9, 2006
• Unscored —
  CVE-2006-4655 Public exploit

  Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SC…

  Sep 9, 2006
• Unscored —
  CVE-2006-4668 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Rob Hensley AckerTodo 4.0 allows remote attackers to inject ar…

  Sep 9, 2006