Skip to content
OpenAdvisories

Archive

28 October 2006

Vulnerabilities first published on this day (UTC), newest first.

11 results · Feed

  • Unscored —

    Multiple memory leaks in xsupplicant before 1.2.6, and possibly other versions, allow attackers to cause a denial of se…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, a…

  • Unscored —

    Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permiss…

  • Unscored —

    Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other vers…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote at…

  • High 7.5

    Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote a…

  • Unscored —

    Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, a…

  • Unscored —
    CVE-2006-5597 Public exploit

    join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user acco…

  • Unscored —

    Unspecified vulnerability in the AirPcap support in Wireshark (formerly Ethereal) 0.99.3 has unspecified attack vectors…

  • Unscored —
    CVE-2006-5596 Public exploit

    Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary…

  • Unscored —

    Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through 0.99.3 allows remote …