Archive
November 2006
Vulnerabilities first published in this month (UTC), newest first.
226 results · Clear filters · Feed
-
Unscored —
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecifie…
-
Unscored —
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute…
-
Unscored —
Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2006-5777 Public exploit
Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged func…
-
Unscored —CVE-2006-5767 Public exploit
PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remot…
-
Unscored —CVE-2006-5765 Public exploit
SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-5773 Public exploit
Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitra…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled,…
-
Unscored —CVE-2006-5766 Public exploit
PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-5761 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject…
-
Unscored —CVE-2006-5764 Public exploit
PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to …
-
Unscored —CVE-2006-5763 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_global…
-
Unscored —CVE-2006-5760 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-5770 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-5762 Public exploit
PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers…
-
Unscored —CVE-2006-5772 Public exploit
Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute …
-
Unscored —CVE-2006-5758 Public exploit
The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel str…
-
Unscored —CVE-2006-5757 Public exploit
Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versi…
-
Unscored —
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML…
-
Unscored —CVE-2006-5731 Public exploit
Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to incl…
-
Unscored —CVE-2006-5733 Public exploit
Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and exe…
-
Unscored —CVE-2006-5732 Public exploit
SQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-5739 Public exploit
PHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire communityPortals 1.0_2005-10-18_12-3…
-
Unscored —CVE-2006-5730 Public exploit
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CM…
-
Unscored —CVE-2006-5727 Public exploit
PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute ar…
-
Unscored —CVE-2006-5728 Public exploit
XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long…
-
Unscored —CVE-2006-5726 Public exploit
alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service (memory corruption) by m…
-
Unscored —
The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibl…
-
Unscored —CVE-2006-5722 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, al…
-
Unscored —
Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_…
-
Unscored —CVE-2006-5725 Public exploit
The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request…
-
Unscored —CVE-2006-5711 Public exploit
ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP…
-
Unscored —CVE-2006-5707 Public exploit
SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-5703 Public exploit
Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject …
-
Unscored —CVE-2006-5721 Public exploit
The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (s…
-
Unscored —CVE-2006-5712 Public exploit
Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script vi…
-
Unscored —CVE-2006-5714 Public exploit
Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary …
-
Unscored —CVE-2006-5716 Public exploit
Directory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to include local files via a …
-
Unscored —CVE-2006-5715 Public exploit
Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitra…
-
Unscored —CVE-2006-5720 Public exploit
SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and ear…