Archive
November 2006
Vulnerabilities first published in this month (UTC), newest first.
226 results · Clear filters · Feed
-
Unscored —CVE-2006-6094 Public exploit
Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 a…
-
Unscored —CVE-2006-6078 Public exploit
PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbit…
-
Unscored —CVE-2006-6080 Public exploit
Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-6067 Public exploit
Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to exe…
-
Unscored —
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2006-6066 Public exploit
Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitr…
-
Unscored —CVE-2006-6070 Public exploit
SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attacker…
-
Unscored —CVE-2006-6065 Public exploit
PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows r…
-
Unscored —
Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execu…
-
Unscored —CVE-2006-6062 Public exploit
Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a den…
-
Unscored —CVE-2006-6055 Public exploit
Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to e…
-
Unscored —CVE-2006-6050 Public exploit
Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-6040 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attack…
-
Unscored —CVE-2006-6045 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitr…
-
Unscored —CVE-2006-6044 Public exploit
PHP remote file inclusion vulnerability in gallery_top.inc.php in PHPQuickGallery 1.9 and earlier allows remote attacke…
-
Unscored —CVE-2006-6041 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other ve…
-
Unscored —CVE-2006-6039 Public exploit
SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-6051 Public exploit
PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter (com_reporter) component for Mambo and…
-
Unscored —CVE-2006-6042 Public exploit
PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is …
-
Unscored —CVE-2006-6047 Public exploit
Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to…
-
Unscored —CVE-2006-6035 Public exploit
Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2006-6038 Public exploit
SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to …
-
Unscored —CVE-2006-6021 Public exploit
SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitra…
-
Unscored —
SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an…
-
Unscored —CVE-2006-6020 Public exploit
Cross-site scripting (XSS) vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject…
-
Unscored —CVE-2006-6028 Public exploit
Directory traversal vulnerability in textview.php in Anton Vlasov DoSePa 1.0.4 allows remote attackers to read arbitrar…
-
Unscored —CVE-2006-6015 Public exploit
Buffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10.4 allows remote attackers to cause a de…
-
Unscored —
Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly…
-
Unscored —
Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11…
-
Unscored —CVE-2006-6029 Public exploit
SQL injection vulnerability in vir_Login.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-6022 Public exploit
Cross-site scripting (XSS) vulnerability in login_form.asp in BestWebApp Dating Site allows remote attackers to inject …
-
Unscored —
Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in…
-
Unscored —CVE-2006-5975 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbi…
-
Unscored —CVE-2006-5976 Public exploit
Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-5983 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow remote authenticated user…
-
Unscored —CVE-2006-5987 Public exploit
SQL injection vulnerability in default.asp in ASPintranet, possibly 1.2, allows remote attackers to execute arbitrary S…
-
Unscored —
Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter (USB) allows remote attackers to execute…
-
Unscored —CVE-2003-1308 Public exploit
CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local u…
-
Unscored —CVE-2006-5962 Public exploit
Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands …