Skip to content
OpenAdvisories

Archive

2 December 2006

Vulnerabilities first published on this day (UTC), newest first.

← November 2006 2006 / December /2 January 2007 →
  1. 141
  2. 214
  3. 310
  4. 447
  5. 515
  6. 617
  7. 747
  8. 816
  9. 9 
  10. 1057
  11. 1119
  12. 1217
  13. 138
  14. 1462
  15. 1546
  16. 16 
  17. 17 
  18. 1831
  19. 198
  20. 2046
  21. 2129
  22. 223
  23. 2325
  24. 24 
  25. 25 
  26. 2623
  27. 2733
  28. 2833
  29. 2928
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2006-6234

    Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote…

  • Unscored —
    CVE-2006-6233

    SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute…

  • Unscored —
    CVE-2006-6232 Public exploit

    PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-6223

    Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject a…

  • Unscored —
    CVE-2006-6225 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via …

  • Unscored —
    CVE-2006-6231

    vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.ph…

  • Unscored —
    CVE-2006-6224

    PHP remote file inclusion vulnerability in the installation scripts in Puntal before 1.8.5 allows remote attackers to e…

  • Unscored —
    CVE-2006-6228

    Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote…

  • Unscored —
    CVE-2006-6226

    Multiple format string vulnerabilities in NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a …

  • Unscored —
    CVE-2006-6230

    SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2006-6229

    Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to inf…

  • Unscored —
    CVE-2006-6071

    TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirect…

  • Unscored —
    CVE-2006-6227

    The Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to …

  • Unscored —
    CVE-2006-5751

    Integer overflow in the get_fdb_entries function in net/bridge/br_ioctl.c in the Linux kernel before 2.6.18.4 allows lo…