Archive
22 November 2006
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test…
-
Unscored —CVE-2006-6067 Public exploit
Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in the cached_album function in functions.php for mAlbum 0.3 and earlier allows remot…
-
Unscored —
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via…
-
Unscored —
index.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via an invalid gal paramete…
-
Unscored —CVE-2006-6066 Public exploit
Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitr…
-
Unscored —CVE-2006-6070 Public exploit
SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attacker…
-
Unscored —CVE-2006-6065 Public exploit
PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows r…
-
Unscored —
Multiple buffer overflows in the Message Parsing Interpreter (MPI) in Fuzzball MUCK before 6.07 allow remote attackers …
-
Unscored —
Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execu…
-
Unscored —CVE-2006-6062 Public exploit
Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a den…
-
Unscored —CVE-2006-6061 EPSS 10%
com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to ex…
-
Unscored —CVE-2006-6055 Public exploit
Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to e…
-
Unscored —
The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a…
-
Unscored —
The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial o…
-
Unscored —
Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to caus…
-
Unscored —
The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 s…
-
Unscored —
The Linux kernel 2.6.x up to 2.6.18, and possibly other versions, on Fedora Core 6 and possibly other operating systems…
-
Unscored —
The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 str…
-
Unscored —
Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assist…
-
Unscored —CVE-2006-6050 Public exploit
Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL comma…
-
Unscored —
SQL injection vulnerability in OpenHuman before 1.0 allows remote attackers to execute arbitrary SQL commands via unspe…
-
Unscored —CVE-2006-6040 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attack…
-
Unscored —CVE-2006-6045 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitr…
-
Unscored —CVE-2006-6044 Public exploit
PHP remote file inclusion vulnerability in gallery_top.inc.php in PHPQuickGallery 1.9 and earlier allows remote attacke…
-
Unscored —CVE-2006-6041 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other ve…
-
Unscored —
NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, whi…
-
Unscored —CVE-2006-6039 Public exploit
SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to ex…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dan Jensen Travelsized CMS 0.4.1 and earlier allow …
-
Unscored —CVE-2006-6051 Public exploit
PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter (com_reporter) component for Mambo and…
-
Unscored —CVE-2006-6042 Public exploit
PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is …
-
Unscored —
PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com_shambo2) component for Mambo 4.5 allows remo…
-
Unscored —CVE-2006-6047 Public exploit
Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to…
-
Unscored —
PHP file inclusion vulnerability in loginform-inc.php in Oliver (formerly Webshare) 1.2.2 and earlier, when register_gl…
-
Unscored —
SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic_quotes_gpc is disabled, allows remote attac…
-
Unscored —CVE-2006-6035 Public exploit
Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2006-6038 Public exploit
SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web scr…