28 November 2006

32 results · Feed

• Unscored —
  CVE-2006-4518

  Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a DNS request…

  Nov 28, 2006
• Unscored —
  CVE-2006-6154 Public exploit

  PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows …

  Nov 28, 2006
• Unscored —
  CVE-2006-6150 Public exploit

  PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execut…

  Nov 28, 2006
• Unscored —
  CVE-2006-6155

  Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allow …

  Nov 28, 2006
• Unscored —
  CVE-2006-6152 Public exploit

  Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary …

  Nov 28, 2006
• Unscored —
  CVE-2006-6146

  Buffer overflow in the HPDF_Page_Circle function in hpdf_page_operator.c in Takeshi Kanno Haru Free PDF Library (libhar…

  Nov 28, 2006
• Unscored —
  CVE-2006-6151 Public exploit

  PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to ex…

  Nov 28, 2006
• Unscored —
  CVE-2006-6159

  Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers …

  Nov 28, 2006
• Unscored —
  CVE-2006-6161

  Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to exe…

  Nov 28, 2006
• Unscored —
  CVE-2006-6145

  CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.propert…

  Nov 28, 2006
• Unscored —
  CVE-2006-6158 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 …

  Nov 28, 2006
• Unscored —
  CVE-2006-6113

  Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to (1) include/admin_au…

  Nov 28, 2006
• Unscored —
  CVE-2006-6149 Public exploit

  SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL comm…

  Nov 28, 2006
• Unscored —
  CVE-2006-6148

  Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to …

  Nov 28, 2006
• Unscored —
  CVE-2006-6160 Public exploit

  SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers t…

  Nov 28, 2006
• Unscored —
  CVE-2006-6153 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to injec…

  Nov 28, 2006
• Unscored —
  CVE-2006-6157 Public exploit

  SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQ…

  Nov 28, 2006
• Unscored —
  CVE-2006-6147 Public exploit

  Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands …

  Nov 28, 2006
• Unscored —
  CVE-2006-6156

  Cross-site scripting (XSS) vulnerability in auth/message.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier a…

  Nov 28, 2006
• Unscored —
  CVE-2006-4181

  Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 all…

  Nov 28, 2006
• Unscored —
  CVE-2006-6137 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP …

  Nov 28, 2006
• Unscored —
  CVE-2006-6135

  Multiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) have unknown…

  Nov 28, 2006
• Unscored —
  CVE-2006-6136

  IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the p…

  Nov 28, 2006
• Unscored —
  CVE-2006-6140 Public exploit

  PHP remote file inclusion vulnerability in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to execute arbitrary …

  Nov 28, 2006
• Unscored —
  CVE-2006-6138 Public exploit

  Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directo…

  Nov 28, 2006
• Unscored —
  CVE-2006-6139

  Directory traversal vulnerability in downloadexcel.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to rea…

  Nov 28, 2006
• Unscored —
  CVE-2006-6141

  Buffer overflow in Tftpd32 3.01 allows remote attackers to cause a denial of service via a long GET or PUT request, whi…

  Nov 28, 2006
• Unscored —
  CVE-2006-6131 Public exploit

  Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite)…

  Nov 28, 2006
• Unscored —
  CVE-2006-6134 EPSS 44%

  Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.0…

  Nov 28, 2006
• Unscored —
  CVE-2006-6130 Public exploit

  Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN i…

  Nov 28, 2006
• Unscored —
  CVE-2006-6133 Public exploit EPSS 54%

  Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2…

  Nov 28, 2006
• Unscored —
  CVE-2006-6132

  Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands v…

  Nov 28, 2006