Skip to content
OpenAdvisories

Archive

11 September 2006

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows contex…

  • Unscored —
    CVE-2006-4681 Public exploit

    Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary…

  • Unscored —

    Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2006-4676 Public exploit

    TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to…

  • Unscored —
    CVE-2006-4678 Public exploit

    PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code v…

  • Unscored —

    DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive inf…

  • Unscored —

    IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.

  • Unscored —

    The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in t…

  • Unscored —

    Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execu…

  • Unscored —

    Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to u…

  • Unscored —

    PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers t…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote …

  • Unscored —
    CVE-2006-4673 Public exploit

    Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on t…

  • Unscored —
    CVE-2006-4671 Public exploit

    PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote a…

  • Unscored —
    CVE-2006-4672 Public exploit

    PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remot…