Skip to content
OpenAdvisories

Archive

25 October 2006

Vulnerabilities first published on this day (UTC), newest first.

← September 2006 2006 / October /25 November 2006 →
  1. 1 
  2. 258
  3. 313
  4. 48
  5. 53
  6. 625
  7. 7 
  8. 8 
  9. 925
  10. 1032
  11. 117
  12. 1231
  13. 1311
  14. 14 
  15. 15 
  16. 1611
  17. 1734
  18. 1871
  19. 195
  20. 2035
  21. 211
  22. 22 
  23. 2320
  24. 2420
  25. 2526
  26. 2643
  27. 2728
  28. 2811
  29. 29 
  30. 306
  31. 3127
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2006-5382

    3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-W…

  • Unscored —
    CVE-2006-5510 Public exploit

    Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arb…

  • Unscored —
    CVE-2006-5504

    Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject …

  • Unscored —
    CVE-2006-5508 Public exploit

    Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute …

  • Unscored —
    CVE-2006-5503 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to…

  • Unscored —
    CVE-2006-5511 Public exploit

    Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, al…

  • Unscored —
    CVE-2006-5506 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-5507

    Multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5509 Public exploit

    Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-5512 Public exploit

    Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-5502

    Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online …

  • Unscored —
    CVE-2006-5505 Public exploit

    Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the l…

  • Unscored —
    CVE-2006-5501

    Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 S…

  • Unscored —
    CVE-2006-5495 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2006-5488

    SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remot…

  • Unscored —
    CVE-2006-5494 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB mod…

  • Unscored —
    CVE-2006-5490

    Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to …

  • Unscored —
    CVE-2006-5489

    Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attacker…

  • Unscored —
    CVE-2006-5496

    Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inj…

  • Unscored —
    CVE-2006-5497 Public exploit

    PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when re…

  • Unscored —
    CVE-2006-5499

    Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to in…

  • Unscored —
    CVE-2006-5493 Public exploit

    PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote at…

  • Unscored —
    CVE-2006-5491

    Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-5492

    Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive…

  • Unscored —
    CVE-2006-5500

    Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlie…

  • Unscored —
    CVE-2006-5498

    Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote …