Skip to content
OpenAdvisories

Archive

7 November 2006

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —
    CVE-2006-5788 Public exploit

    PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allow…

  • Unscored —
    CVE-2006-5784 Public exploit

    Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 …

  • Unscored —

    Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of…

  • Unscored —
    CVE-2006-5789 Public exploit

    War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number…

  • Unscored —
    CVE-2006-5786 Public exploit

    Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute P…

  • Unscored —

    Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote at…

  • Unscored —
    CVE-2006-5787 Public exploit

    admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passw…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inje…

  • Unscored —
    CVE-2006-5792 Public exploit EPSS 61%

    Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecifie…

  • Unscored —

    Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service (crash) via a long URL in an A ta…

  • Unscored —

    Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code…

  • Unscored —

    list.php in DigiOz Guestbook before 1.7.1 allows remote attackers to obtain sensitive information via a non-numeric pag…

  • Unscored —
    CVE-2006-5650 Public exploit EPSS 67%

    The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute…

  • Unscored —

    ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users…

  • Unscored —
    CVE-2006-5780 Public exploit EPSS 63%

    Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2006-5779 EPSS 77%

    OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with …

  • Unscored —

    loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a deni…

  • Unscored —

    ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallow…

  • Unscored —

    Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted r…

  • Unscored —

    Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted re…

  • Unscored —

    Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and poss…

  • Unscored —
    CVE-2006-5777 Public exploit

    Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged func…

  • Unscored —

    Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the aria…