Archive
November 2006
Vulnerabilities first published in this month (UTC), newest first.
511 results · Feed
-
Unscored —
Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in …
-
Unscored —
Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8…
-
Unscored —
Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 all…
-
Unscored —
Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5…
-
Unscored —
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird be…
-
Unscored —CVE-2006-5796 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to injec…
-
Unscored —
Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary …
-
Unscored —
The owserver module in owfs and owhttpd 2.5p5 and earlier does not properly check the path type, which allows attackers…
-
Unscored —
Cross-site scripting (XSS) vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrar…
-
Unscored —
PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album module 1.02 and earli…
-
Unscored —CVE-2006-5795 Public exploit
Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allo…
-
Unscored —
PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arb…
-
Unscored —CVE-2006-5802 Public exploit
SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attac…
-
Unscored —
SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification tha…
-
Unscored —CVE-2006-5788 Public exploit
PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allow…
-
Unscored —CVE-2006-5784 Public exploit
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 …
-
Unscored —
Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of…
-
Unscored —CVE-2006-5789 Public exploit
War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number…
-
Unscored —CVE-2006-5786 Public exploit
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute P…
-
Unscored —
Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote at…
-
Unscored —CVE-2006-5787 Public exploit
admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passw…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inje…
-
Unscored —
Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecifie…
-
Unscored —
Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service (crash) via a long URL in an A ta…
-
Unscored —
Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code…
-
Unscored —
list.php in DigiOz Guestbook before 1.7.1 allows remote attackers to obtain sensitive information via a non-numeric pag…
-
Unscored —
The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute…
-
Unscored —
ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users…
-
Unscored —
Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2006-5779 EPSS 77%
OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with …
-
Unscored —
loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a deni…
-
Unscored —
ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallow…
-
Unscored —
Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted r…
-
Unscored —
Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted re…
-
Unscored —
Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and poss…
-
Unscored —CVE-2006-5777 Public exploit
Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged func…
-
Unscored —
Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the aria…
-
Unscored —CVE-2006-5767 Public exploit
PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remot…