Archive
4 November 2006
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
Heap-based buffer overflow the "Answering Service" function in ICQ 2003b Build 3916 allows local users to cause a denia…
-
Unscored —
The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibl…
-
Unscored —CVE-2006-5722 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 4.0 allows remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows remote attackers to in…
-
Unscored —
Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_…
-
Unscored —CVE-2006-5725 Public exploit
The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request…
-
Unscored —
Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and pe…
-
Unscored —
SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-5711 Public exploit
ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP…
-
Unscored —CVE-2006-5707 Public exploit
SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-5703 Public exploit
Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject …
-
Unscored —
Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authent…
-
Unscored —CVE-2006-5721 Public exploit
The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (s…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow …
-
High 7.5
Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attacke…
-
Unscored —CVE-2006-5712 Public exploit
Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script vi…
-
Unscored —CVE-2006-5714 Public exploit
Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary …
-
Unscored —
SQL injection vulnerability in libs/sessions.lib.php in BytesFall Explorer (bfExplorer) 0.0.6 allows remote attackers t…
-
Unscored —CVE-2006-5716 Public exploit
Directory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to include local files via a …
-
Unscored —CVE-2006-5715 Public exploit
Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitra…
-
Unscored —CVE-2006-5720 Public exploit
SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and ear…
-
Unscored —
Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vector…
-
Unscored —
HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate acces…
-
Unscored —
The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the …
-
Unscored —CVE-2006-5465 EPSS 10%
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (…