Skip to content
OpenAdvisories

Archive

27 September 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5051 Public exploit EPSS 46%

    Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and p…

  • Unscored —
    CVE-2006-5045 Public exploit

    Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and a…

  • Unscored —
    CVE-2006-5033 Public exploit

    Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier all…

  • Unscored —
    CVE-2006-5023 Public exploit

    SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-5030 Public exploit

    SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users…

  • Unscored —
    CVE-2006-5044 Public exploit

    Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Jooml…

  • Unscored —
    CVE-2006-5032 Public exploit

    PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-5034 Public exploit

    Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-5019 Public exploit

    Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /…

  • Medium —
    CVE-2006-5031 Public exploit

    CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files

    Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js …

  • Unscored —
    CVE-2006-5043 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 fo…

  • Unscored —
    CVE-2006-5048 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier …

  • Unscored —
    CVE-2006-5017 Public exploit

    SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows re…

  • Critical 9.8
    CVE-2006-5021 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-5020 Public exploit EPSS 17%

    Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-5016 Public exploit

    Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, …

  • Unscored —
    CVE-2006-5028 Public exploit EPSS 46%

    Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft…

  • Unscored —
    CVE-2006-5022 Public exploit

    PHP remote file inclusion vulnerability in includes/global.php in Joshua Wilson pNews System 1.1.0 (aka PowerNews) allo…

  • Unscored —
    CVE-2006-4924 Public exploit EPSS 38%

    sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service…

  • High 8.8
    CVE-2006-5014 Public exploit

    Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unsp…