Skip to content
OpenAdvisories

Archive

24 November 2006

Vulnerabilities first published on this day (UTC), newest first.

← October 2006 2006 / November /24 December 2006 →
  1. 116
  2. 2 
  3. 330
  4. 426
  5. 5 
  6. 640
  7. 723
  8. 831
  9. 94
  10. 1031
  11. 115
  12. 12 
  13. 13 
  14. 1427
  15. 1529
  16. 1615
  17. 1727
  18. 185
  19. 19 
  20. 2016
  21. 2132
  22. 2238
  23. 23 
  24. 2426
  25. 25 
  26. 2615
  27. 277
  28. 2832
  29. 299
  30. 3027
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2006-6083 Public exploit

    SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-6085

    Kile before 1.9.3 does not assign a backup file the same permissions as the original file, which might allow local user…

    kile Debian
  • Unscored —
    CVE-2006-6091

    Cross-site scripting (XSS) vulnerability in Grim Pirate GrimBB before 2006_11_21 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-6088 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-6097 Public exploit EPSS 12%

    GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a…

    tar Debian
  • Unscored —
    CVE-2006-6084 Public exploit

    Directory traversal vulnerability in abitwhizzy.php in aBitWhizzy allows remote attackers to read arbitrary files via a…

  • Unscored —
    CVE-2006-6092 Public exploit

    Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute a…

  • Unscored —
    CVE-2006-6096 Public exploit

    Cross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows remote attackers to inje…

  • Unscored —
    CVE-2006-6087 Public exploit

    Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-6089

    Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject a…

  • Unscored —
    CVE-2006-6090

    Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-6093 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attacke…

  • Unscored —
    CVE-2006-6086 Public exploit

    PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-6082 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-6095 Public exploit

    Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-6094 Public exploit

    Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-6075

    Cross-site scripting (XSS) vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-6073

    Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-6081

    PHP remote file inclusion vulnerability in Smarty_Compiler.class.php in Telaen 1.1.0 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-6076 Public exploit EPSS 72%

    Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 a…

  • Unscored —
    CVE-2006-6078 Public exploit

    PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-6077

    The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.…

  • Unscored —
    CVE-2006-6074

    Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-6079

    Multiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2006-6072

    SQL injection vulnerability in bpg/publications_list.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 …

  • Unscored —
    CVE-2006-6080 Public exploit

    Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary…