Skip to content
OpenAdvisories

Archive

8 November 2006

Vulnerabilities first published on this day (UTC), newest first.

31 results · Feed

  • Unscored —

    Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors.

  • Unscored —

    Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vd…

  • Unscored —
    CVE-2006-5810 Public exploit

    Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inj…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote a…

  • Unscored —

    prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library/Parallels/.dhcpd_config…

  • Unscored —

    Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vd…

  • Unscored —
    CVE-2006-5815 Public exploit EPSS 75%

    Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably aut…

  • Unscored —

    Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vd_kms4…

  • Unscored —

    Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users t…

  • Unscored —
    CVE-2006-5811 Public exploit

    PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,…

  • Unscored —

    Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using …

  • Unscored —

    Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 all…

  • Unscored —

    The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full contro…

  • Unscored —

    Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear …

  • Unscored —

    SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful conne…

  • Unscored —

    Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in …

  • Unscored —

    Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8…

  • Unscored —

    Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 all…

  • Unscored —

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5…

  • Unscored —

    Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird be…

  • Unscored —
    CVE-2006-5796 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to injec…

  • Unscored —

    Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary …

  • Unscored —

    The owserver module in owfs and owhttpd 2.5p5 and earlier does not properly check the path type, which allows attackers…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrar…

  • Unscored —

    PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album module 1.02 and earli…

  • Unscored —
    CVE-2006-5795 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allo…

  • Unscored —

    PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-5802 Public exploit

    SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attac…

  • Unscored —

    SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL comman…

  • Unscored —

    Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification tha…