Archive
27 September 2006
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to de…
-
Unscored —
Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.3 have unknown impact an…
-
Unscored —
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and p…
-
Unscored —
Unspecified vulnerability in SEF404x (com_sef) for Joomla! has unspecified impact and attack vectors.
-
Unscored —
Unspecified vulnerability in Classifieds (com_classifieds) component 1.3 and earlier for Joomla! has unspecified impact…
-
Unscored —
Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via U…
-
Unscored —CVE-2006-5045 Public exploit
Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and a…
-
Unscored —CVE-2006-5033 Public exploit
Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier all…
-
Unscored —CVE-2006-5023 Public exploit
SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —
Unspecified vulnerability in mosMedia (com_mosmedia) 1.0.8 and earlier for Joomla! has unspecified impact and attack ve…
-
Unscored —CVE-2006-5030 Public exploit
SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users…
-
Unscored —
Jeroen Vennegoor JevonCMS, possibly pre alpha, allows remote attackers to obtain sensitive information via a direct req…
-
Unscored —
The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 01_02_07, has a hard-coded username and password, which all…
-
Unscored —CVE-2006-5044 Public exploit
Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Jooml…
-
Unscored —
MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL…
-
Unscored —
Unspecified vulnerability in Events 1.3 beta module (com_events) for Joomla! has unspecified impact and attack vectors.
-
Unscored —CVE-2006-5032 Public exploit
PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-5034 Public exploit
Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers t…
-
Unscored —CVE-2006-5019 Public exploit
Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /…
-
Unscored —
Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact an…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers t…
-
Unscored —
Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.11.3 and earlier for Joomla! has unspecified impact and att…
-
Medium —CVE-2006-5031 Public exploit
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js …
-
Unscored —
SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the ve…
-
Critical 9.8
Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact an…
-
Unscored —CVE-2006-5043 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 fo…
-
Unscored —
ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which al…
-
Unscored —
Unspecified vulnerability in rsgallery2.html.php in RS Gallery2 component (com_rsgallery2) before 1.11.3 for Joomla! al…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier …
-
Unscored —
Unspecified vulnerability in Hot Properties (possibly com_hotproperties) 0.97 and earlier for Joomla! has unspecified i…
-
Unscored —CVE-2006-5017 Public exploit
SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows re…
-
Unscored —
MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy serve…
-
Critical 9.8CVE-2006-5021 Public exploit
Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PH…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2006-5016 Public exploit
Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, …
-
Unscored —
Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft…
-
Unscored —CVE-2006-5022 Public exploit
PHP remote file inclusion vulnerability in includes/global.php in Joshua Wilson pNews System 1.1.0 (aka PowerNews) allo…
-
Unscored —CVE-2006-4694 EPSS 13%
Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attack…
-
Unscored —
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service…
-
Unscored —
Untrusted search path vulnerability in acctctl in IBM AIX 5.3.0 allows local users to execute arbitrary commands by mod…