10 November 2006

31 results · Feed

• Unscored —
  CVE-2006-5861

  The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation…

  Nov 10, 2006
• Unscored —
  CVE-2006-5821

  Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0…

  Nov 10, 2006
• Unscored —
  CVE-2006-5487

  Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, all…

  Nov 10, 2006
• Unscored —
  CVE-2006-5840

  Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL command…

  Nov 10, 2006
• Unscored —
  CVE-2006-5839 Public exploit

  PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to…

  Nov 10, 2006
• Unscored —
  CVE-2006-5842

  The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions,…

  Nov 10, 2006
• Unscored —
  CVE-2006-5850 Public exploit

  Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code v…

  Nov 10, 2006
• Unscored —
  CVE-2006-5847 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to injec…

  Nov 10, 2006
• Unscored —
  CVE-2006-5846 Public exploit EPSS 12%

  Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and inc…

  Nov 10, 2006
• Unscored —
  CVE-2006-5853 Public exploit

  Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attacker…

  Nov 10, 2006
• Unscored —
  CVE-2006-5841 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, a…

  Nov 10, 2006
• Unscored —
  CVE-2006-5851 Public exploit

  openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/ou…

  Nov 10, 2006
• Unscored —
  CVE-2006-5844

  Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions[] and (2) se…

  Nov 10, 2006
• Unscored —
  CVE-2006-5849 Public exploit

  PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execu…

  Nov 10, 2006
• Unscored —
  CVE-2006-5845

  Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and e…

  Nov 10, 2006
• Unscored —
  CVE-2006-5852 Public exploit

  Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via…

  Nov 10, 2006
• Unscored —
  CVE-2006-5843

  Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web…

  Nov 10, 2006
• Unscored —
  CVE-2006-5825 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject …

  Nov 10, 2006
• Unscored —
  CVE-2006-5827

  Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpComasy CMS 0.7.9pre and earlier allow remote att…

  Nov 10, 2006
• Unscored —
  CVE-2006-5834 Public exploit

  Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include …

  Nov 10, 2006
• Unscored —
  CVE-2006-5832 Public exploit

  All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server …

  Nov 10, 2006
• Unscored —
  CVE-2006-5837 Public exploit

  Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows …

  Nov 10, 2006
• Unscored —
  CVE-2006-5835 EPSS 13%

  The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does no…

  Nov 10, 2006
• Unscored —
  CVE-2006-5831 Public exploit

  PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier…

  Nov 10, 2006
• Unscored —
  CVE-2006-5829 Public exploit

  Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers t…

  Nov 10, 2006
• Unscored —
  CVE-2006-5833

  gbcms_php_files/up_loader.php GreenBeast CMS 1.3 does not require authentication to upload files, which allows remote a…

  Nov 10, 2006
• Unscored —
  CVE-2006-5828 Public exploit

  SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to ex…

  Nov 10, 2006
• Unscored —
  CVE-2006-5838 Public exploit

  PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_…

  Nov 10, 2006
• Unscored —
  CVE-2006-5826 Public exploit EPSS 11%

  Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbit…

  Nov 10, 2006
• Unscored —
  CVE-2006-5830 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remot…

  Nov 10, 2006
• Unscored —
  CVE-2006-5836 Public exploit

  The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows loc…

  Nov 10, 2006