Skip to content
OpenAdvisories

Archive

23 October 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —

    The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Cl…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x befo…

  • Unscored —

    Bugzilla 2.18.x before 2.18.6, 2.20.x before 2.20.3, 2.22.x before 2.22.1, and 2.23.x before 2.23.3 allow remote attack…

  • Unscored —

    procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell…

  • Unscored —
    CVE-2006-5446 Public exploit

    SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to…

  • Unscored —

    Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x bef…

  • Unscored —

    Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Hinton Design phpht Topsites allow remote attackers to execute ar…

  • Unscored —

    Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to ex…

  • Unscored —
    CVE-2006-5444 Public exploit EPSS 86%

    Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12…

  • Unscored —
    CVE-2006-5448 EPSS 12%

    The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to c…

  • Unscored —

    Unspecified vulnerability in XIAO Gang WWW Interactive Mathematics Server (WIMS) before 3.60 allows remote attackers to…

  • Unscored —
    CVE-2006-5450 Public exploit

    SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to exe…

  • Unscored —
    CVE-2006-5458 Public exploit

    PHP remote file inclusion vulnerability in common.php in Hinton Design phpht Topsites allows remote attackers to execut…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web s…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in editversions.cgi in Bugzilla before 2.22.1 and 2.23.x before 2.23.3 …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the registration form in Casinosoft Casino Script (Masvet) 3.2 a…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2003-1307 Public exploit

    The mod_php module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to th…