Archive
November 2006
Vulnerabilities first published in this month (UTC), newest first.
226 results · Clear filters · Feed
-
Unscored —CVE-2006-6177 Public exploit
SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remo…
-
Unscored —CVE-2006-6173 Public exploit
Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6 and earlier allows loc…
-
Unscored —CVE-2003-1310 Public exploit
The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local use…
-
Unscored —CVE-2006-6154 Public exploit
PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows …
-
Unscored —CVE-2006-6150 Public exploit
PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execut…
-
Unscored —CVE-2006-6152 Public exploit
Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2006-6151 Public exploit
PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to ex…
-
Unscored —CVE-2006-6158 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 …
-
Unscored —CVE-2006-6149 Public exploit
SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6160 Public exploit
SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers t…
-
Unscored —CVE-2006-6153 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to injec…
-
Unscored —CVE-2006-6157 Public exploit
SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-6147 Public exploit
Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2006-6137 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2006-6140 Public exploit
PHP remote file inclusion vulnerability in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-6138 Public exploit
Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directo…
-
Unscored —CVE-2006-6131 Public exploit
Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite)…
-
Unscored —CVE-2006-6130 Public exploit
Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN i…
-
Unscored —
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2…
-
Unscored —CVE-2006-6129 Public exploit
Integer overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial of service and possibly…
-
Unscored —
Heap-based buffer overflow in the wireless driver (WG311ND5.SYS) 2.3.1.10 for NetGear WG311v1 wireless adapter allows r…
-
Unscored —CVE-2006-6124 Public exploit
Cross-site scripting (XSS) vulnerability in SeleniumServer Web Server 1.0 allows remote attackers to inject arbitrary w…
-
Unscored —
Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run…
-
Unscored —CVE-2006-6109 Public exploit
Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-6118 Public exploit
Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-6111 Public exploit
Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6117 Public exploit
SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-6116 Public exploit
SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-6115 Public exploit
SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-6083 Public exploit
SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-6088 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitr…
-
Unscored —
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a…
-
Unscored —CVE-2006-6084 Public exploit
Directory traversal vulnerability in abitwhizzy.php in aBitWhizzy allows remote attackers to read arbitrary files via a…
-
Unscored —CVE-2006-6092 Public exploit
Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute a…
-
Unscored —CVE-2006-6096 Public exploit
Cross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows remote attackers to inje…
-
Unscored —CVE-2006-6087 Public exploit
Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-6093 Public exploit
Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attacke…
-
Unscored —CVE-2006-6086 Public exploit
PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-6082 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbit…
-
Unscored —CVE-2006-6095 Public exploit
Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands v…