Archive
November 2006
Vulnerabilities first published in this month (UTC), newest first.
511 results · Feed
-
Unscored —CVE-2006-5841 Public exploit
Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, a…
-
Unscored —CVE-2006-5851 Public exploit
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/ou…
-
Unscored —
Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions[] and (2) se…
-
Unscored —CVE-2006-5849 Public exploit
PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execu…
-
Unscored —
Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and e…
-
Unscored —CVE-2006-5852 Public exploit
Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2006-5825 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpComasy CMS 0.7.9pre and earlier allow remote att…
-
Unscored —CVE-2006-5834 Public exploit
Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include …
-
Unscored —CVE-2006-5832 Public exploit
All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server …
-
Unscored —CVE-2006-5837 Public exploit
Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows …
-
Unscored —CVE-2006-5835 EPSS 13%
The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does no…
-
Unscored —CVE-2006-5831 Public exploit
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier…
-
Unscored —CVE-2006-5829 Public exploit
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers t…
-
Unscored —
gbcms_php_files/up_loader.php GreenBeast CMS 1.3 does not require authentication to upload files, which allows remote a…
-
Unscored —CVE-2006-5828 Public exploit
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-5838 Public exploit
PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_…
-
Unscored —
Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbit…
-
Unscored —CVE-2006-5830 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remot…
-
Unscored —CVE-2006-5836 Public exploit
The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows loc…
-
Unscored —
Integer overflow in the ffs_rdextattr function in FreeBSD 6.1 allows local users to cause a denial of service (kernel p…
-
Unscored —
The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed…
-
Unscored —
The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to…
-
Unscored —
radexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication before executing commands…
-
Unscored —
Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors.
-
Unscored —
Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vd…
-
Unscored —CVE-2006-5810 Public exploit
Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inj…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote a…
-
Unscored —
prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library/Parallels/.dhcpd_config…
-
Unscored —
Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vd…
-
Unscored —
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably aut…
-
Unscored —
Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vd_kms4…
-
Unscored —
Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users t…
-
Unscored —CVE-2006-5811 Public exploit
PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,…
-
Unscored —
Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using …
-
Unscored —
Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 all…
-
Unscored —
The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full contro…
-
Unscored —
Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear …
-
Unscored —
SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful conne…