21 November 2006

32 results · Feed

• Unscored —
  CVE-2006-6021 Public exploit

  SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitra…

  Nov 21, 2006
• Unscored —
  CVE-2006-6012

  Cross-site scripting (XSS) vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager (CSM) allows remote att…

  Nov 21, 2006
• High 7.5
  CVE-2006-6025

  QUALCOMM Eudora WorldMail 4.0 allows remote attackers to cause a denial of service, as demonstrated by a certain module…

  Nov 21, 2006
• Unscored —
  CVE-2006-6010 Public exploit EPSS 14%

  SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an…

  Nov 21, 2006
• Unscored —
  CVE-2006-6013

  Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c)…

  Nov 21, 2006
• Unscored —
  CVE-2006-6008

  ftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return status of certain seteui…

  linux-ftpd Debian
  Nov 21, 2006
• Unscored —
  CVE-2006-6020 Public exploit

  Cross-site scripting (XSS) vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject…

  Nov 21, 2006
• Unscored —
  CVE-2006-6014

  The NetBSD-current kernel before 20061028 does not properly perform bounds checking of an unspecified userspace paramet…

  Nov 21, 2006
• Unscored —
  CVE-2006-6032

  Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attacke…

  Nov 21, 2006
• Unscored —
  CVE-2006-6028 Public exploit

  Directory traversal vulnerability in textview.php in Anton Vlasov DoSePa 1.0.4 allows remote attackers to read arbitrar…

  Nov 21, 2006
• Medium 6.5
  CVE-2006-6017

  WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, whi…

  wordpress Debian
  Nov 21, 2006
• Unscored —
  CVE-2006-6015 Public exploit

  Buffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10.4 allows remote attackers to cause a de…

  Nov 21, 2006
• Critical 9.8
  CVE-2006-6024

  Multiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack ve…

  Nov 21, 2006
• Unscored —
  CVE-2006-6019

  Cross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php in Bill Roberts Bloo 1.0 allow…

  Nov 21, 2006
• Unscored —
  CVE-2006-6027 Public exploit EPSS 45%

  Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly…

  Nov 21, 2006
• Unscored —
  CVE-2006-6026 Public exploit EPSS 11%

  Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11…

  Nov 21, 2006
• Unscored —
  CVE-2006-6031

  Multiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions (GCIS) ASPCart allow remote attackers t…

  Nov 21, 2006
• Medium 6.5
  CVE-2006-6016

  wp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the metadata of an arbitrary…

  wordpress Debian
  Nov 21, 2006
• Unscored —
  CVE-2006-6034

  Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow remote attackers to execute…

  Nov 21, 2006
• Unscored —
  CVE-2006-6023

  PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows remote attackers to execute ar…

  Nov 21, 2006
• Unscored —
  CVE-2006-6011

  Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial o…

  Nov 21, 2006
• Unscored —
  CVE-2006-6007

  save_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote attackers to change th…

  Nov 21, 2006
• Unscored —
  CVE-2006-6029 Public exploit

  SQL injection vulnerability in vir_Login.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL comma…

  Nov 21, 2006
• Unscored —
  CVE-2006-6018

  PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execut…

  Nov 21, 2006
• Unscored —
  CVE-2006-6033

  Multiple directory traversal vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attackers to r…

  Nov 21, 2006
• Unscored —
  CVE-2006-6009

  Unspecified vulnerability in the Java Runtime Environment (JRE) Swing library in JDK and JRE 5.0 Update 7 and earlier a…

  Nov 21, 2006
• Unscored —
  CVE-2006-6022 Public exploit

  Cross-site scripting (XSS) vulnerability in login_form.asp in BestWebApp Dating Site allows remote attackers to inject …

  Nov 21, 2006
• Unscored —
  CVE-2006-6030

  Multiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute arbitrary SQL commands v…

  Nov 21, 2006
• Unscored —
  CVE-2005-4815

  SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before…

  Nov 21, 2006
• Unscored —
  CVE-2006-3890 Public exploit EPSS 15%

  Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in…

  Nov 21, 2006
• Unscored —
  CVE-2006-5991

  Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to execute arbitrary SQL comm…

  Nov 21, 2006
• Unscored —
  CVE-2006-5990

  VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1 Patch 1 (Build 33425), when s…

  Nov 21, 2006