Skip to content
OpenAdvisories

Archive

28 September 2006

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —
    CVE-2006-4343 Public exploit EPSS 19%

    The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier…

  • Unscored —
    CVE-2006-3738 EPSS 50%

    Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier…

  • Unscored —
    CVE-2006-2937 EPSS 11%

    OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop…

  • Unscored —

    OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (C…

  • Unscored —
    CVE-2006-5058 Public exploit EPSS 10%

    Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call…

  • Unscored —
    CVE-2006-5062 Public exploit

    PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows r…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML b…

  • Unscored —
    CVE-2006-5057 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject ar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 …

  • Unscored —
    CVE-2006-5061 Public exploit

    PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script (AVCX) 3.4 and earlier allows remote attacke…

  • Unscored —
    CVE-2006-5056 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attack…

  • Unscored —
    CVE-2006-5068 Public exploit

    PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1…

  • Unscored —
    CVE-2006-5066 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote a…

  • Unscored —
    CVE-2006-5053 Public exploit

    PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers t…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-5054 Public exploit

    SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2006-5065 Public exploit

    PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals i…

  • Unscored —
    CVE-2006-5060 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5064 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitr…

  • Unscored —

    PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote atta…

  • Unscored —
    CVE-2006-5070 Public exploit

    PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier all…

  • Unscored —
    CVE-2006-5055 Public exploit

    PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows…