Skip to content
OpenAdvisories

Archive

October 2006

Vulnerabilities first published in this month (UTC), newest first.

← September 2006 2006 / October November 2006 →
  1. 1 
  2. 258
  3. 313
  4. 48
  5. 53
  6. 625
  7. 7 
  8. 8 
  9. 925
  10. 1032
  11. 117
  12. 1231
  13. 1311
  14. 14 
  15. 15 
  16. 1611
  17. 1734
  18. 1871
  19. 195
  20. 2035
  21. 211
  22. 22 
  23. 2320
  24. 2420
  25. 2526
  26. 2643
  27. 2728
  28. 2811
  29. 29 
  30. 306
  31. 3127
All Critical High Medium Low Exploited only Public exploit

551 results · Feed

  • Unscored —
    CVE-2006-5631

    Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-5629 Public exploit

    Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-5633 Public exploit

    Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service (crash) by creating a…

    firefox-esr Debian
  • Medium 6.1
    CVE-2006-5632

    Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-5630

    Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual directory of an arbitrary si…

  • Unscored —
    CVE-2006-5623 Public exploit

    PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool (EE Tool) 0.4-1 and earlier allows…

  • Unscored —
    CVE-2006-5625 Public exploit

    PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Managem…

  • Unscored —
    CVE-2006-5626 Public exploit

    Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (…

  • Unscored —
    CVE-2006-5624 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System (MPCS) 1.0.0 and earlier allow remote a…

  • Unscored —
    CVE-2006-5620 Public exploit

    PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when re…

  • Unscored —
    CVE-2006-5628

    SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute a…

  • Unscored —
    CVE-2006-5621 Public exploit

    PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote at…

  • Unscored —
    CVE-2006-5627 Public exploit EPSS 17%

    Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-5622 Public exploit

    SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-4248

    thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via…

  • Unscored —
    CVE-2006-5619

    The seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18-stable allows local use…

  • Unscored —
    CVE-2006-5606

    Multiple SQL injection vulnerabilities in BytesFall Explorer (bfExplorer) 0.0.7.1 and earlier allow remote attackers to…

  • Unscored —
    CVE-2006-5616

    Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow attackers to execute arb…

  • Unscored —
    CVE-2006-5618 Public exploit

    Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files…

  • Unscored —
    CVE-2006-5613 Public exploit

    PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enab…

  • Unscored —
    CVE-2006-5614 Public exploit EPSS 80%

    Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, …

  • Unscored —
    CVE-2006-5617

    Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or do…

  • Unscored —
    CVE-2006-5612 Public exploit

    PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled…

  • Unscored —
    CVE-2006-5615 Public exploit

    PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals is enabled, allows re…

  • Critical 9.8
    CVE-2006-5610

    PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded…

  • Unscored —
    CVE-2006-5611

    Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related …

  • Unscored —
    CVE-2005-4814

    Unrestricted file upload vulnerability in Segue CMS before 1.3.6, when the Apache HTTP Server handles .phtml files with…

  • Unscored —
    CVE-2006-5607

    Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2006-5608

    SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to exe…

  • Unscored —
    CVE-2006-5609 Public exploit

    Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories v…

  • Unscored —
    CVE-2006-5604

    Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute…

  • Unscored —
    CVE-2006-5605

    Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to in…

  • Critical 9.8
    CVE-2006-5603 Public exploit

    SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-5602

    Multiple memory leaks in xsupplicant before 1.2.6, and possibly other versions, allow attackers to cause a denial of se…

  • Unscored —
    CVE-2006-5598

    Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, a…

  • Unscored —
    CVE-2006-5600

    Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permiss…

  • Unscored —
    CVE-2006-5601

    Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other vers…

  • Unscored —
    CVE-2006-5599

    Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote at…

  • High 7.5
    CVE-2006-4574

    Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote a…

    wireshark Debian
  • Unscored —
    CVE-2006-4513

    Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, a…

    abiword wv Debian