Skip to content
OpenAdvisories

Archive

27 October 2006

Vulnerabilities first published on this day (UTC), newest first.

← September 2006 2006 / October /27 November 2006 →
  1. 1 
  2. 258
  3. 313
  4. 48
  5. 53
  6. 625
  7. 7 
  8. 8 
  9. 925
  10. 1032
  11. 117
  12. 1231
  13. 1311
  14. 14 
  15. 15 
  16. 1611
  17. 1734
  18. 1871
  19. 195
  20. 2035
  21. 211
  22. 22 
  23. 2320
  24. 2420
  25. 2526
  26. 2643
  27. 2728
  28. 2811
  29. 29 
  30. 306
  31. 3127
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2006-4805

    epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99…

    wireshark Debian
  • Unscored —
    CVE-2006-5468

    Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to caus…

    wireshark Debian
  • Unscored —
    CVE-2006-5740

    Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to caus…

    wireshark Debian
  • Unscored —
    CVE-2006-5594

    PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly earlier, allows remot…

  • Unscored —
    CVE-2006-5590 Public exploit

    PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-5587 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers …

  • Unscored —
    CVE-2006-5591

    Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2006-5589

    Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-5588 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when register_globals and m…

  • Unscored —
    CVE-2006-5592

    Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog coo…

  • Unscored —
    CVE-2006-5467

    The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consump…

  • Unscored —
    CVE-2006-5593

    Buffer overflow in Desknet's (niokeru) before 5.0J R1.0 might allow remote authenticated users to execute arbitrary cod…

  • Unscored —
    CVE-2006-5567 Public exploit EPSS 15%

    Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute…

  • Unscored —
    CVE-2006-5562 Public exploit

    PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote att…

  • Unscored —
    CVE-2006-5563

    Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2006-5565

    CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRL…

  • Unscored —
    CVE-2006-5566 Public exploit

    CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP heade…

  • Unscored —
    CVE-2006-5559 Public exploit EPSS 44%

    The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connecti…

  • Unscored —
    CVE-2006-5557 Public exploit

    Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions…

  • Unscored —
    CVE-2006-5571 Public exploit

    Stack-based buffer overflow in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to execut…

  • Unscored —
    CVE-2006-5569

    FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary…

  • Unscored —
    CVE-2006-5570

    Directory traversal vulnerability in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to …

  • Unscored —
    CVE-2006-5558 Public exploit

    Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to exe…

  • Unscored —
    CVE-2006-5556 Public exploit

    Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other v…

  • Unscored —
    CVE-2006-5561 Public exploit

    SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-5564 Public exploit

    Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-5568 Public exploit

    FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command.

  • Unscored —
    CVE-2006-5560

    Cross-site scripting (XSS) vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to …