Skip to content
OpenAdvisories

Archive

November 2006

Vulnerabilities first published in this month (UTC), newest first.

← October 2006 2006 / November December 2006 →
  1. 116
  2. 2 
  3. 330
  4. 426
  5. 5 
  6. 640
  7. 723
  8. 831
  9. 94
  10. 1031
  11. 115
  12. 12 
  13. 13 
  14. 1427
  15. 1529
  16. 1615
  17. 1727
  18. 185
  19. 19 
  20. 2016
  21. 2132
  22. 2238
  23. 23 
  24. 2426
  25. 25 
  26. 2615
  27. 277
  28. 2832
  29. 299
  30. 3027
All Critical High Medium Low Exploited only Public exploit

511 results · Feed

  • Unscored —
    CVE-2006-5887 Public exploit

    SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5885 Public exploit

    SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-5890 Public exploit

    SQL injection vulnerability in detail.asp in Superfreaker Studios USupport 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5893 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to exe…

  • Unscored —
    CVE-2006-5895 Public exploit

    PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-5888 Public exploit

    SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execut…

  • Unscored —
    CVE-2006-5894 Public exploit

    Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows re…

  • Unscored —
    CVE-2006-5886 Public exploit

    SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows re…

  • Unscored —
    CVE-2006-5889 Public exploit

    SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-5891 Public exploit

    SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-5461

    Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel in…

    avahi Debian
  • Unscored —
    CVE-2006-5892 Public exploit

    SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-4691 Public exploit EPSS 80%

    Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft W…

  • Unscored —
    CVE-2006-4687 EPSS 27%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combina…

  • Unscored —
    CVE-2006-3445 EPSS 43%

    Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP…

  • Unscored —
    CVE-2006-5198 Public exploit EPSS 62%

    The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before bui…

  • Unscored —
    CVE-2006-5884

    Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6…

  • Unscored —
    CVE-2006-4252

    PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and appli…

    pdns-recursor Debian
  • Unscored —
    CVE-2006-4251

    Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a mal…

    pdns-recursor pdns Debian
  • Unscored —
    CVE-2006-5883 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary w…

  • Unscored —
    CVE-2006-5881 Public exploit

    SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute…

  • Unscored —
    CVE-2006-5880 Public exploit

    SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-5882 Public exploit EPSS 13%

    Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC3…

  • High 7.5
    CVE-2006-5878

    Edgewall Trac Cross-site request forgery (CSRF) vulnerability

    Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.

    trac trac Debian PyPI
  • Unscored —
    CVE-2006-5879 Public exploit

    SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-5862

    Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized (…

  • Unscored —
    CVE-2006-5866 Public exploit

    Directory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5863 Public exploit

    PHP remote file inclusion vulnerability in inc/session.php for LetterIt 2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-5864 Public exploit EPSS 16%

    Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows …

    evince gv Debian
  • Unscored —
    CVE-2006-5865 Public exploit

    PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2006-5861

    The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation…

  • Unscored —
    CVE-2006-5821

    Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0…

  • Unscored —
    CVE-2006-5487

    Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, all…

  • Unscored —
    CVE-2006-5840

    Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-5839 Public exploit

    PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-5842

    The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions,…

  • Unscored —
    CVE-2006-5850 Public exploit

    Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2006-5847 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2006-5846 Public exploit EPSS 12%

    Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and inc…

  • Unscored —
    CVE-2006-5853 Public exploit

    Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attacker…