Skip to content
OpenAdvisories

Archive

3 November 2006

Vulnerabilities first published on this day (UTC), newest first.

30 results · Feed

  • Unscored —
    CVE-2006-5701 Public exploit

    Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other dis…

  • Unscored —

    Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and…

  • Critical 9.8

    PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2…

  • Unscored —

    resmom/start_exec.c in pbs_mom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary fi…

  • Unscored —
    CVE-2006-5675 Public exploit

    Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have un…

  • Unscored —
    CVE-2006-5676 Public exploit

    SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to…

  • Unscored —

    Unspecified vulnerability in Ampache 3.3.2 and earlier, when register_globals is enabled, allows remote attackers to by…

  • Unscored —
    CVE-2006-5669 Public exploit

    PHP remote file inclusion vulnerability in gestion/savebackup.php in Gepi 1.4.0 and earlier, and possibly other version…

  • Unscored —

    PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5670 Public exploit

    PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attacker…

  • Unscored —

    IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 us…

  • Unscored —
    CVE-2006-5667 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5673 Public exploit

    PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enable…

  • Unscored —
    CVE-2006-5666 Public exploit

    SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register_globals is enabled, allow…

  • Unscored —
    CVE-2006-5672 Public exploit

    PHP remote file inclusion vulnerability in web/init_mysource.php in MySource CMS 2.16.2 and earlier allows remote attac…

  • Unscored —

    The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and…

  • Unscored —
    CVE-2006-5665 Public exploit

    PHP remote file inclusion vulnerability in admin/modules_data.php in the phpBB module Spider Friendly 1.3.10 and earlie…

  • Unscored —

    SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    PAM_extern before 0.2 sends a password as a command line argument, which allows local users to obtain the password by l…

  • Unscored —
    CVE-2006-5661 Public exploit

    Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-5653 Public exploit

    Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Exp…

  • Unscored —
    CVE-2006-5662 Public exploit

    SQL injection vulnerability in easy notesManager (eNM) 0.0.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages…

  • Unscored —
    CVE-2006-5652 Public exploit

    Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to i…

  • Unscored —

    Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors.

  • Unscored —

    Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE…

  • Unscored —

    The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the …

  • Unscored —

    Memory leak in the push_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a den…

  • Unscored —

    BlooMooWeb ActiveX control (AidemATL.dll) allows remote attackers to (1) download arbitrary files via a URL in the bstr…