Skip to content
OpenAdvisories

Archive

14 November 2006

Vulnerabilities first published on this day (UTC), newest first.

27 results · Feed

  • Unscored —
    CVE-2006-4688 Public exploit EPSS 76%

    Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 a…

  • Unscored —
    CVE-2006-4689 EPSS 35%

    Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2…

  • Unscored —
    CVE-2006-5887 Public exploit

    SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5885 Public exploit

    SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-5890 Public exploit

    SQL injection vulnerability in detail.asp in Superfreaker Studios USupport 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5893 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to exe…

  • Unscored —
    CVE-2006-5895 Public exploit

    PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-5888 Public exploit

    SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5894 Public exploit

    Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows re…

  • Unscored —
    CVE-2006-5886 Public exploit

    SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows re…

  • Unscored —
    CVE-2006-5889 Public exploit

    SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-5891 Public exploit

    SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitra…

  • Unscored —

    Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel in…

  • Unscored —
    CVE-2006-5892 Public exploit

    SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-4691 Public exploit EPSS 80%

    Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft W…

  • Unscored —
    CVE-2006-4687 EPSS 27%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combina…

  • Unscored —
    CVE-2006-3445 EPSS 43%

    Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP…

  • Unscored —
    CVE-2006-5198 Public exploit EPSS 62%

    The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before bui…

  • Unscored —

    Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6…

  • Unscored —

    PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and appli…

  • Unscored —

    Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a mal…

  • Unscored —
    CVE-2006-5883 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary w…

  • Unscored —
    CVE-2006-5881 Public exploit

    SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute…

  • Unscored —
    CVE-2006-5880 Public exploit

    SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5882 Public exploit EPSS 13%

    Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC3…

  • High 7.5

    Edgewall Trac Cross-site request forgery (CSRF) vulnerability

    Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

  • Unscored —
    CVE-2006-5879 Public exploit

    SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbi…