Skip to content
OpenAdvisories

Archive

September 2006

Vulnerabilities first published in this month (UTC), newest first.

← August 2006 2006 / September October 2006 →
  1. 112
  2. 2 
  3. 3 
  4. 4 
  5. 59
  6. 641
  7. 732
  8. 823
  9. 922
  10. 10 
  11. 1115
  12. 1234
  13. 1344
  14. 1437
  15. 1527
  16. 16 
  17. 17 
  18. 18 
  19. 1962
  20. 201
  21. 2123
  22. 224
  23. 2331
  24. 24 
  25. 2515
  26. 2620
  27. 2753
  28. 2823
  29. 2929
  30. 30 
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2006-4247

    Plone allows anonymous users to reset any users password through the web via Password Reset Tool

    Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."

    plone PyPI
  • Critical 9.8
    CVE-2006-5024

    Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact an…

  • Critical 9.8
    CVE-2006-5021 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PH…

  • Critical 9.1
    CVE-2006-4339

    Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass

    A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.5…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian