Archive
9 October 2006
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —
The clip_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial…
-
Unscored —
The perfmonctl system call (sys_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium system…
-
Unscored —CVE-2006-5219 Public exploit
SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arb…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register_globals is enabled, allow remote atta…
-
Unscored —
Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local…
-
Unscored —
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8…
-
Unscored —
Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corpora…
-
Unscored —
Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060…
-
Unscored —
Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept …
-
Unscored —CVE-2006-5217 Public exploit
SQL injection vulnerability in giris_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corpora…
-
Unscored —
Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary co…
-
Unscored —
Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects…
-
Unscored —
Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or …
-
Unscored —CVE-2006-5208 Public exploit
Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —
Cross-site scripting (XSS) vulnerability in action_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier all…
-
Unscored —CVE-2006-5209 Public exploit
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Admin Topic Action Logging Mod 0.95 …
-
Unscored —
Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (d…
-
Unscored —CVE-2006-5207 Public exploit
PHP remote file inclusion vulnerability in images/smileys/smileys_packs.php in phpMyTeam 2.0, when register_globals is …
-
Unscored —CVE-2006-5206 Public exploit
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argum…
-
Unscored —CVE-2006-5202 Public exploit
Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote atta…
-
Unscored —
Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x u…
-
Unscored —
Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive informat…
-
Unscored —
Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to ca…