Skip to content
OpenAdvisories

Archive

21 September 2006

Vulnerabilities first published on this day (UTC), newest first.

← August 2006 2006 / September /21 October 2006 →
  1. 112
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 641
  7. 732
  8. 823
  9. 922
  10. 10 
  11. 1115
  12. 1234
  13. 1344
  14. 1437
  15. 1527
  16. 16 
  17. 17 
  18. 18 
  19. 1962
  20. 201
  21. 2123
  22. 224
  23. 2331
  24. 24 
  25. 2515
  26. 2620
  27. 2753
  28. 2823
  29. 2929
  30. 30 
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2006-3507 Public exploit

    Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physical…

  • Unscored —
    CVE-2006-3508

    Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attacker…

  • Unscored —
    CVE-2006-3509

    Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate a…

  • Unscored —
    CVE-2006-4918 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute a…

  • Unscored —
    CVE-2006-4922 Public exploit

    Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and ea…

  • Unscored —
    CVE-2006-4920 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to ex…

  • Unscored —
    CVE-2006-4923 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-4919

    Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier…

  • Unscored —
    CVE-2006-4917 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-4915 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-4921 Public exploit

    PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4916 Public exploit

    SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-4913 Public exploit

    Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to i…

  • Unscored —
    CVE-2006-4914

    Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences…

  • Unscored —
    CVE-2006-4906 Public exploit

    SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4909

    Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is …

  • Unscored —
    CVE-2006-4905

    PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-4911

    Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous…

  • Unscored —
    CVE-2006-4907

    OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which…

  • Unscored —
    CVE-2006-4910

    The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(…

  • Unscored —
    CVE-2006-4908

    OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL containing an * (asterisk) wi…

  • Unscored —
    CVE-2006-4912 Public exploit

    PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-4904 Public exploit

    Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to …