Skip to content
OpenAdvisories

Archive

November 2006

Vulnerabilities first published in this month (UTC), newest first.

226 results · Clear filters · Feed

  • Unscored —
    CVE-2006-5701 Public exploit

    Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other dis…

  • Unscored —
    CVE-2006-5675 Public exploit

    Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have un…

  • Unscored —
    CVE-2006-5676 Public exploit

    SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5669 Public exploit

    PHP remote file inclusion vulnerability in gestion/savebackup.php in Gepi 1.4.0 and earlier, and possibly other version…

  • Unscored —
    CVE-2006-5670 Public exploit

    PHP remote file inclusion vulnerability in forgot_pass.php in Free Image Hosting 1.0 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-5667 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5673 Public exploit

    PHP remote file inclusion vulnerability in bb_func_txt.php in miniBB 2.0.2 and earlier, when register_globals is enable…

  • Unscored —
    CVE-2006-5666 Public exploit

    SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-5672 Public exploit

    PHP remote file inclusion vulnerability in web/init_mysource.php in MySource CMS 2.16.2 and earlier allows remote attac…

  • Unscored —
    CVE-2006-5665 Public exploit

    PHP remote file inclusion vulnerability in admin/modules_data.php in the phpBB module Spider Friendly 1.3.10 and earlie…

  • Unscored —
    CVE-2006-5661 Public exploit

    Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-5653 Public exploit

    Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Exp…

  • Unscored —
    CVE-2006-5662 Public exploit

    SQL injection vulnerability in easy notesManager (eNM) 0.0.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-5652 Public exploit

    Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to i…

  • Unscored —
    CVE-2006-4704 Public exploit EPSS 46%

    Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScrip…

  • Unscored —
    CVE-2006-5647 Public exploit EPSS 21%

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.…

  • Unscored —
    CVE-2006-5646 Public exploit EPSS 18%

    Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10,…

  • Unscored —
    CVE-2006-5645 Public exploit EPSS 18%

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.…

  • Unscored —
    CVE-2006-5638 Public exploit

    Multiple SQL injection vulnerabilities in cherche.php in PHPMyRing 4.2.1 and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2006-5640 Public exploit

    SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-5634 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-5635 Public exploit

    SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-5641 Public exploit

    SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5637 Public exploit

    PHP remote file inclusion vulnerability in faq_reply.php in Faq Administrator 2.1b allows remote attackers to execute a…

  • Unscored —
    CVE-2006-5643 Public exploit

    Cross-site scripting (XSS) vulnerability in search_de.html in foresite CMS allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-5636 Public exploit

    PHP remote file inclusion vulnerability in common.php in Simple Website Software (SWS) 0.99 and earlier allows remote a…