Skip to content
OpenAdvisories

Archive

12 September 2006

Vulnerabilities first published on this day (UTC), newest first.

34 results · Feed

  • Unscored —
    CVE-2006-0032 Public exploit EPSS 25%

    Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when t…

  • Unscored —
    CVE-2006-0001 EPSS 42%

    Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute a…

  • Unscored —

    Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a …

  • Unscored —

    Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary cod…

  • Unscored —

    Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FP…

  • Unscored —

    Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2006-4384 Public exploit EPSS 16%

    Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary c…

  • Unscored —

    Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a c…

  • Unscored —
    CVE-2006-4640 EPSS 11%

    Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the all…

  • Unscored —

    Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2006-3873 EPSS 29%

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions…

  • Unscored —
    CVE-2006-3311 EPSS 18%

    Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows us…

  • Unscored —
    CVE-2006-3442 EPSS 27%

    Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote at…

  • Unscored —
    CVE-2006-4721 Public exploit

    Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and…

  • Unscored —
    CVE-2006-4720 Public exploit

    PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-4716 Public exploit

    PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attacke…

  • Unscored —
    CVE-2006-4713 Public exploit

    PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-4708 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-4625 Public exploit

    PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, s…

  • Unscored —
    CVE-2006-4709 Public exploit

    SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet.php) 1.2.1 allows rem…

  • Unscored —
    CVE-2006-4714 Public exploit

    PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 a…

  • Unscored —
    CVE-2006-4715 Public exploit

    SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and ear…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in livre_or.php in KorviBlog 1.3.0 allow remote attackers to inject…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to in…

  • Unscored —
    CVE-2006-4722 Public exploit

    PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2006-4723 Public exploit

    PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globa…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.1.7 allows remote at…

  • Unscored —
    CVE-2006-4719 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remo…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HT…

  • Unscored —

    The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcook…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in MyBB (aka MyBulletinBoard…

  • Unscored —

    Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterpri…