Skip to content
OpenAdvisories

Archive

27 October 2006

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5590 Public exploit

    PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-5587 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers …

  • Unscored —
    CVE-2006-5588 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when register_globals and m…

  • Unscored —
    CVE-2006-5567 Public exploit EPSS 15%

    Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute…

  • Unscored —
    CVE-2006-5562 Public exploit

    PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote att…

  • Unscored —
    CVE-2006-5566 Public exploit

    CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP heade…

  • Unscored —
    CVE-2006-5559 Public exploit EPSS 44%

    The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connecti…

  • Unscored —
    CVE-2006-5557 Public exploit

    Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions…

  • Unscored —
    CVE-2006-5571 Public exploit

    Stack-based buffer overflow in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to execut…

  • Unscored —
    CVE-2006-5558 Public exploit

    Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to exe…

  • Unscored —
    CVE-2006-5556 Public exploit

    Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other v…

  • Unscored —
    CVE-2006-5561 Public exploit

    SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-5564 Public exploit

    Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-5568 Public exploit

    FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command.