Skip to content
OpenAdvisories

Archive

20 November 2006

Vulnerabilities first published on this day (UTC), newest first.

← October 2006 2006 / November /20 December 2006 →
  1. 116
  2. 2 
  3. 330
  4. 426
  5. 5 
  6. 640
  7. 723
  8. 831
  9. 94
  10. 1031
  11. 115
  12. 12 
  13. 13 
  14. 1427
  15. 1529
  16. 1615
  17. 1727
  18. 185
  19. 19 
  20. 2016
  21. 2132
  22. 2238
  23. 23 
  24. 2426
  25. 25 
  26. 2615
  27. 277
  28. 2832
  29. 299
  30. 3027
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2006-5989

    Off-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2006-5979

    Renasoft NetJetServer 2.5.3.939, and possibly earlier, uses insecure permissions for Global.asa, which allows remote at…

  • Unscored —
    CVE-2006-5986

    admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote a…

  • Unscored —
    CVE-2006-5978

    Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some secur…

  • Unscored —
    CVE-2006-5981

    Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attac…

  • Unscored —
    CVE-2006-5975 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2006-5980

    adm_lgn_admin.asp in Renasoft NetJetServer 2.5.3.939, and possibly earlier, does not properly perform login authenticat…

  • Unscored —
    CVE-2006-5977

    Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-5984

    Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 allow remote authenticated…

  • Unscored —
    CVE-2006-5976 Public exploit

    Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-5983 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated user…

  • Unscored —
    CVE-2006-5988 EPSS 13%

    Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows remote attackers to cause…

  • Unscored —
    CVE-2006-5985

    Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allo…

  • Unscored —
    CVE-2006-5987 Public exploit

    SQL injection vulnerability in default.asp in ASPintranet, possibly 1.2, allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-5982

    SeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the Servers directory, which…

  • Unscored —
    CVE-2006-5973

    Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are use…

    dovecot Debian