Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
557 results · Feed
-
Unscored —
Eval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute arbitrary PHP code via …
-
Unscored —CVE-2006-4559 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attack…
-
Unscored —
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user wi…
-
Unscored —CVE-2006-4553 Public exploit
PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joo…
-
Unscored —CVE-2006-4543 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-4560 EPSS 19%
Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the bro…
-
Unscored —CVE-2006-4558 Public exploit
DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to exec…
-
Unscored —
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood…
-
Unscored —
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files v…
-
Unscored —CVE-2006-4095 EPSS 12%
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when register_globals is enabled, allow remote attack…
-
Unscored —
CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource fun…
-
Unscored —
Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code …
-
Unscored —
c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metach…
-
Unscored —CVE-2006-3636 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitra…
-
Unscored —
Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standar…
-
Unscored —CVE-2006-4540 Public exploit
Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject …
-
Unscored —CVE-2006-4541 Public exploit
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a de…
-
Unscored —
(1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center…
-
Unscored —
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows r…
-
Unscored —
Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of servi…
-
Unscored —CVE-2006-4536 Public exploit
SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute …
-
Unscored —
NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when…
-
Critical 9.1
Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass
A flaw was found in OpenSSL. When configured to use an RSA key with exponent 3, OpenSSL improperly removes PKCS-1 padding before generating a hash. This allows remote attackers to forge PKCS #1 v1.5 signatures. Consequently, OpenSSL may incorrectly verify X.5…
-
Unscored —CVE-2006-4534 EPSS 34%
Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execut…
-
Unscored —
SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-4523 Public exploit
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote a…
-
Unscored —
Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute a…
-
Unscored —CVE-2006-4531 Public exploit
PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execu…
-
Unscored —
SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals i…
-
Unscored —CVE-2006-4532 Public exploit
PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and ea…
-
Unscored —CVE-2006-4525 Public exploit
Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remot…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arb…
-
Unscored —
Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web sc…
-
Unscored —
includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an insufficien…
-
Unscored —CVE-2006-4524 Public exploit
Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute ar…