Archive
14 September 2006
Vulnerabilities first published on this day (UTC), newest first.
37 results · Feed
-
Unscored —
Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute…
-
Unscored —
The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitr…
-
Unscored —CVE-2006-4437 Public exploit
Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in…
-
Unscored —
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of se…
-
Unscored —
Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0,…
-
Unscored —
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.00, B.11.04…
-
Unscored —CVE-2006-4793 Public exploit
Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL co…
-
Unscored —
SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain th…
-
Unscored —
Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code v…
-
Unscored —
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.11 and B.11…
-
Unscored —CVE-2006-4796 Public exploit
Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arb…
-
Unscored —CVE-2006-4794 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers t…
-
Unscored —
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the dig…
-
Unscored —
Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspeci…
-
Unscored —CVE-2006-4781 Public exploit
Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial o…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject …
-
Unscored —CVE-2006-4782 Public exploit
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass auth…
-
Unscored —
AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which display…
-
Unscored —CVE-2006-4779 Public exploit
PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier…
-
Unscored —
SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-4788 Public exploit
PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, wh…
-
Unscored —CVE-2006-4789 Public exploit
Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service (system crash) or exe…
-
Unscored —
SQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows rem…
-
Unscored —CVE-2006-4780 Public exploit
PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers …
-
Unscored —
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —
Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of s…
-
Unscored —
Heap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to…
-
Unscored —
Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components (CFC) within a sa…
-
Unscored —
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) f…
-
Unscored —
Unspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7.01 allows remote atta…
-
Unscored —CVE-2006-4771 Public exploit
Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web scri…
-
Unscored —
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a denial of service by …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbi…
-
Unscored —
HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attac…
-
Unscored —
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of s…
-
Unscored —
Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x …