Skip to content
OpenAdvisories

Archive

26 September 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —
    CVE-2006-5000 EPSS 64%

    Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown …

  • Unscored —
    CVE-2006-5001 EPSS 32%

    Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down t…

  • Unscored —

    Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecti…

  • Unscored —

    Cisco NAC allows quarantined devices to communicate over the network with (1) DNS, (2) DHCP, and (3) EAPoUDP, which all…

  • Unscored —
    CVE-2006-4992 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote att…

  • Unscored —

    Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physi…

  • Unscored —

    Unspecified vulnerability in JoomlaLib (com_joomlalib) before 1.2.2 for Joomla! allows remote attackers to have an unkn…

  • Unscored —
    CVE-2006-4987 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4178 Public exploit

    Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows loc…

  • Unscored —

    PHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla! allows remote attacke…

  • Unscored —
    CVE-2006-4989 Public exploit

    Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbna…

  • Unscored —

    Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain pri…

  • Unscored —
    CVE-2006-4988 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbi…

  • Unscored —

    RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certifica…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code vi…

  • Unscored —
    CVE-2006-4985 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrar…

  • Unscored —

    Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain fil…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrar…

  • Unscored —

    Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allo…

  • Unscored —
    CVE-2006-4993 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute a…