Skip to content
OpenAdvisories

Archive

26 October 2006

Vulnerabilities first published on this day (UTC), newest first.

43 results · Feed

  • Unscored —
    CVE-2006-5526 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 20…

  • Unscored —

    backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service…

  • Unscored —
    CVE-2006-5555 Public exploit

    PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to exec…

  • Unscored —
    CVE-2006-5546 Public exploit

    PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.…

  • Unscored —
    CVE-2006-5536 Public exploit EPSS 14%

    Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote …

  • Unscored —
    CVE-2006-5539 Public exploit

    PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows re…

  • Unscored —

    D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory vi…

  • Unscored —
    CVE-2006-5530 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject …

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when register_globals is en…

  • Unscored —
    CVE-2006-5544 EPSS 21%

    Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and p…

  • Unscored —
    CVE-2006-5552 Public exploit

    Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial o…

  • Unscored —
    CVE-2006-5547 Public exploit

    PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50, and possibly…

  • Unscored —
    CVE-2006-5529 Public exploit

    Cross-site scripting (XSS) vulnerability in smumdadotcom_ascyb_alumni/mod.php in SchoolAlumni Portal 2.26 allows remote…

  • Unscored —

    PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows r…

  • Unscored —
    CVE-2006-5548 Public exploit

    PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.…

  • Unscored —

    Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address…

  • Unscored —
    CVE-2006-5543 Public exploit

    PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when reg…

  • Unscored —

    backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of servic…

  • Unscored —
    CVE-2006-5531 Public exploit

    PHP remote file inclusion vulnerability in embedded.php in Ascended Guestbook 1.0.0 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-5527 Public exploit

    PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inj…

  • Unscored —

    Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUC…

  • Unscored —
    CVE-2006-5550 Public exploit

    The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors invol…

  • Unscored —
    CVE-2006-5554 Public exploit

    Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary loca…

  • Unscored —
    CVE-2006-5528 Public exploit

    Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute…

  • Unscored —

    backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows rem…

  • Unscored —
    CVE-2006-5551 Public exploit

    Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a lo…

  • Unscored —
    CVE-2006-5535 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attac…

  • Unscored —
    CVE-2006-5522 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to e…

  • Unscored —
    CVE-2006-5519 Public exploit

    PHP remote file inclusion vulnerability in Savant2/Savant2_Plugin_options.php in the MambWeather 1.8.1 and earlier comp…

  • Unscored —
    CVE-2006-5523 Public exploit

    PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-5517 Public exploit EPSS 15%

    Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote…

  • Unscored —
    CVE-2006-5516 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote att…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remot…

  • Unscored —
    CVE-2006-5524 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web…

  • Unscored —

    SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-5518 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers…

  • Unscored —

    PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to…