Skip to content
OpenAdvisories

Archive

October 2006

Vulnerabilities first published in this month (UTC), newest first.

551 results · Feed

  • Unscored —

    Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unkno…

  • Unscored —

    Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.…

  • Unscored —

    Unspecified vulnerability in Database Scheduler component in Oracle Database 10.1.0.3 has unknown impact and remote aut…

  • Unscored —

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote…

  • Unscored —

    Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and rem…

  • Unscored —

    Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1…

  • Unscored —

    Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has un…

  • Unscored —

    Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unk…

  • Unscored —

    Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and…

  • Unscored —

    Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated…

  • Unscored —

    Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote a…

  • Unscored —

    Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA…

  • Unscored —

    Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown i…

  • Unscored —

    Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new thr…

  • Unscored —

    Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a …

  • Unscored —
    CVE-2006-5330 EPSS 25%

    CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux,…

  • Unscored —

    OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local use…

  • Unscored —

    Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and po…

  • Unscored —

    The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary…

  • Unscored —

    Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors,…

  • Unscored —

    Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing …

  • Unscored —
    CVE-2006-5315 Public exploit

    PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-5318 Public exploit

    PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to exec…

  • Unscored —

    The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attack…

  • Unscored —
    CVE-2006-5319 Public exploit

    Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. …

  • Unscored —

    Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL command…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB all…

  • Unscored —
    CVE-2006-5320 Public exploit

    Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2006-5314 Public exploit

    PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitr…

  • Unscored —

    PHP remote file inclusion vulnerability in language/lang/lang_contact_faq.php in the Prillian French 0.8.0 and earlier …

  • Unscored —
    CVE-2006-5317 Public exploit

    PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-5316 Public exploit

    registroTL stores sensitive information under the web root with insufficient access control, which allows remote attack…

  • Unscored —
    CVE-2006-5310 Public exploit

    PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0…

  • Unscored —
    CVE-2006-5309 Public exploit

    PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and …

  • Unscored —
    CVE-2006-5312 Public exploit

    PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows …

  • Unscored —
    CVE-2006-5311 Public exploit

    PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attac…

  • Unscored —
    CVE-2006-5302 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitra…

  • Unscored —

    Unspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated users to obtain "unautho…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Gcontact 0.6.5 allow remote attackers to inject arb…