Skip to content
OpenAdvisories

Archive

4 November 2006

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —

    Heap-based buffer overflow the "Answering Service" function in ICQ 2003b Build 3916 allows local users to cause a denia…

  • Unscored —
    CVE-2006-5710 Public exploit EPSS 20%

    The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibl…

  • Unscored —
    CVE-2006-5722 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, al…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 4.0 allows remote attackers to inject ar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows remote attackers to in…

  • Unscored —
    CVE-2006-5702 Public exploit EPSS 53%

    Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_…

  • Unscored —
    CVE-2006-5725 Public exploit

    The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request…

  • Unscored —

    Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and pe…

  • Unscored —

    SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-5711 Public exploit

    ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP…

  • Unscored —
    CVE-2006-5707 Public exploit

    SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-5703 Public exploit

    Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject …

  • Unscored —

    Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authent…

  • Unscored —
    CVE-2006-5721 Public exploit

    The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (s…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow …

  • High 7.5

    Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attacke…

  • Unscored —
    CVE-2006-5712 Public exploit

    Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script vi…

  • Unscored —
    CVE-2006-5714 Public exploit

    Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary …

  • Unscored —

    SQL injection vulnerability in libs/sessions.lib.php in BytesFall Explorer (bfExplorer) 0.0.6 allows remote attackers t…

  • Unscored —
    CVE-2006-5716 Public exploit

    Directory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to include local files via a …

  • Unscored —
    CVE-2006-5715 Public exploit

    Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitra…

  • Unscored —
    CVE-2006-5720 Public exploit

    SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and ear…

  • Unscored —

    Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vector…

  • Unscored —

    HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate acces…

  • Unscored —

    The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the …

  • Unscored —
    CVE-2006-5465 EPSS 10%

    Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (…