Skip to content
OpenAdvisories

Archive

29 September 2006

Vulnerabilities first published on this day (UTC), newest first.

← August 2006 2006 / September /29 October 2006 →
  1. 112
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 641
  7. 732
  8. 823
  9. 922
  10. 10 
  11. 1115
  12. 1234
  13. 1344
  14. 1437
  15. 1527
  16. 16 
  17. 17 
  18. 18 
  19. 1962
  20. 201
  21. 2123
  22. 224
  23. 2331
  24. 24 
  25. 2515
  26. 2620
  27. 2753
  28. 2823
  29. 2929
  30. 30 
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2006-5099

    lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote…

    dokuwiki Debian
  • Unscored —
    CVE-2006-5098

    lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption…

    dokuwiki Debian
  • Unscored —
    CVE-2006-5094 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote at…

  • Unscored —
    CVE-2006-5096 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla…

  • Unscored —
    CVE-2006-5097

    PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to …

  • Unscored —
    CVE-2006-5095

    PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5093 Public exploit

    PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows r…

  • Unscored —
    CVE-2006-5087 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-5089 Public exploit

    PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5088

    PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers …

  • Unscored —
    CVE-2006-5090 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject a…

  • Unscored —
    CVE-2006-5091

    Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obt…

  • Unscored —
    CVE-2006-5092 Public exploit

    PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary…

  • Critical 9.1
    CVE-2006-4247

    Plone allows anonymous users to reset any users password through the web via Password Reset Tool

    Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."

    plone PyPI
  • Unscored —
    CVE-2006-4925 EPSS 15%

    packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol …

    openssh Debian
  • Unscored —
    CVE-2006-5086 Public exploit

    Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct req…

  • Unscored —
    CVE-2006-5082

    Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact,…

  • Unscored —
    CVE-2006-5085 Public exploit EPSS 47%

    Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5084 Public exploit EPSS 16%

    Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote at…

  • Unscored —
    CVE-2006-5076 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-5083

    PHP remote file inclusion vulnerability in includes/functions_portal.php in Integrated MODs (IM) Portal 1.2.0 and earli…

  • Unscored —
    CVE-2006-5074 Public exploit

    Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-5078 Public exploit

    PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remo…

  • Unscored —
    CVE-2006-5077 Public exploit

    PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and ea…

  • Unscored —
    CVE-2006-5079 Public exploit

    PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote…

  • Unscored —
    CVE-2006-5081

    PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-5075

    The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to caus…

  • Unscored —
    CVE-2006-5080

    Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type…

  • Unscored —
    CVE-2006-5073

    Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via c…