Skip to content
OpenAdvisories

Archive

23 September 2006

Vulnerabilities first published on this day (UTC), newest first.

← August 2006 2006 / September /23 October 2006 →
  1. 112
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 641
  7. 732
  8. 823
  9. 922
  10. 10 
  11. 1115
  12. 1234
  13. 1344
  14. 1437
  15. 1527
  16. 16 
  17. 17 
  18. 18 
  19. 1962
  20. 201
  21. 2123
  22. 224
  23. 2331
  24. 24 
  25. 2515
  26. 2620
  27. 2753
  28. 2823
  29. 2929
  30. 30 
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2006-4955 Public exploit

    Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attack…

  • Unscored —
    CVE-2006-4952 Public exploit

    The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrar…

  • Unscored —
    CVE-2006-4957 Public exploit

    SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to exe…

  • Unscored —
    CVE-2006-4958

    Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983…

  • Unscored —
    CVE-2006-4951

    Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail mes…

  • Unscored —
    CVE-2006-4950

    Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, …

  • Unscored —
    CVE-2006-4954 Public exploit

    The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote …

  • Unscored —
    CVE-2006-4962 Public exploit

    Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to rea…

  • Unscored —
    CVE-2006-4959

    Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, in…

  • Unscored —
    CVE-2006-4963 Public exploit

    Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbit…

  • Unscored —
    CVE-2006-4956 Public exploit

    Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote a…

  • Unscored —
    CVE-2006-4960 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inje…

  • Unscored —
    CVE-2006-4964

    Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-4961 Public exploit

    SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue D…

  • Unscored —
    CVE-2006-4953 Public exploit

    Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2005-4812

    The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 an…

  • Unscored —
    CVE-2006-4945 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier a…

  • Unscored —
    CVE-2006-4949

    Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1…

  • Unscored —
    CVE-2006-4947

    Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote …

  • Unscored —
    CVE-2006-4948 Public exploit EPSS 56%

    Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-4946 Public exploit

    PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0…

  • Unscored —
    CVE-2006-4941

    Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-4943

    course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbi…

  • Unscored —
    CVE-2006-4944 Public exploit

    PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote atta…

  • Unscored —
    CVE-2006-4938

    help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might a…

  • Unscored —
    CVE-2006-4937

    lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if…

  • Medium —
    CVE-2006-4936

    Moodle does not properly validate module instance id

    Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.

    moodle/moodle Packagist
  • Unscored —
    CVE-2006-4939

    backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debuggi…

  • Unscored —
    CVE-2006-4940

    login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addres…

  • Unscored —
    CVE-2006-4935

    The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and re…

  • Unscored —
    CVE-2006-4942

    Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to …