Skip to content
OpenAdvisories

Archive

26 November 2006

Vulnerabilities first published on this day (UTC), newest first.

← October 2006 2006 / November /26 December 2006 →
  1. 116
  2. 2 
  3. 330
  4. 426
  5. 5 
  6. 640
  7. 723
  8. 831
  9. 94
  10. 1031
  11. 115
  12. 12 
  13. 13 
  14. 1427
  15. 1529
  16. 1615
  17. 1727
  18. 185
  19. 19 
  20. 2016
  21. 2132
  22. 2238
  23. 23 
  24. 2426
  25. 25 
  26. 2615
  27. 277
  28. 2832
  29. 299
  30. 3027
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2006-6124 Public exploit

    Cross-site scripting (XSS) vulnerability in SeleniumServer Web Server 1.0 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-6121 Public exploit EPSS 13%

    Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run…

  • Unscored —
    CVE-2006-6122

    Multiple buffer overflows in TIN before 1.8.2 have unspecified impact and attack vectors, a different vulnerability tha…

    tin Debian
  • Unscored —
    CVE-2006-6123

    Coppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote attackers to bypass XSS prote…

  • Unscored —
    CVE-2006-5965

    PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions (Everyone/Full Control) for the Pass…

  • Unscored —
    CVE-2006-6109 Public exploit

    Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-6108

    Cross-site scripting (XSS) vulnerability in EC-CUBE before 1.0.1a-beta allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-6118 Public exploit

    Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-6111 Public exploit

    Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-6117 Public exploit

    SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-6116 Public exploit

    SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-6110

    Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote at…

  • Unscored —
    CVE-2006-6119

    mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which revea…

  • Unscored —
    CVE-2006-6115 Public exploit

    SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-5869

    pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file nam…