Skip to content
OpenAdvisories

Archive

17 October 2006

Vulnerabilities first published on this day (UTC), newest first.

34 results · Feed

  • Unscored —

    Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new thr…

  • Unscored —

    Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a …

  • Unscored —
    CVE-2006-5330 EPSS 24%

    CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux,…

  • Unscored —

    OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local use…

  • Unscored —

    Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and po…

  • Unscored —

    The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary…

  • Unscored —

    Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors,…

  • Unscored —

    Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing …

  • Unscored —
    CVE-2006-5315 Public exploit

    PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-5318 Public exploit

    PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to exec…

  • Unscored —

    The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attack…

  • Unscored —
    CVE-2006-5319 Public exploit

    Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. …

  • Unscored —

    Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL command…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB all…

  • Unscored —
    CVE-2006-5320 Public exploit

    Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2006-5314 Public exploit

    PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitr…

  • Unscored —

    PHP remote file inclusion vulnerability in language/lang/lang_contact_faq.php in the Prillian French 0.8.0 and earlier …

  • Unscored —
    CVE-2006-5317 Public exploit

    PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-5316 Public exploit

    registroTL stores sensitive information under the web root with insufficient access control, which allows remote attack…

  • Unscored —
    CVE-2006-5310 Public exploit

    PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0…

  • Unscored —
    CVE-2006-5309 Public exploit

    PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and …

  • Unscored —
    CVE-2006-5312 Public exploit

    PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows …

  • Unscored —
    CVE-2006-5311 Public exploit

    PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attac…

  • Unscored —
    CVE-2006-5302 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitra…

  • Unscored —

    Unspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated users to obtain "unautho…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Gcontact 0.6.5 allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-5306 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allo…

  • Unscored —
    CVE-2006-5308 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers…

  • Unscored —
    CVE-2006-5305 Public exploit

    PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote atta…

  • Unscored —

    Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database enc…

  • Unscored —
    CVE-2006-5307 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-5301 Public exploit

    PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for ph…

  • Unscored —
    CVE-2006-5304 Public exploit

    PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to…