Skip to content
OpenAdvisories

Archive

6 December 2006

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/,…

  • Unscored —

    The tr_rx function in ibmtr.c for Linux kernel 2.6.19 assigns the wrong flag to the ip_summed field, which allows remot…

  • Unscored —

    Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf to…

  • Unscored —

    metaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_priority"] is false, allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-6328 Public exploit

    Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbit…

  • Unscored —
    CVE-2006-6330 Public exploit

    index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in …

  • Unscored —
    CVE-2006-6329 Public exploit

    index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile …

  • Unscored —
    CVE-2006-6311 Public exploit EPSS 27%

    Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in…

  • Unscored —
    CVE-2006-6310 Public exploit EPSS 16%

    Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an inv…

  • Unscored —

    Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and …

  • Unscored —

    Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attack…

  • Unscored —
    CVE-2006-5994 EPSS 34%

    Unspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word 2004 and 2004 v. X fo…

  • Unscored —

    fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts…

  • Unscored —

    DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/…

  • Unscored —

    The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart con…

  • Unscored —
    CVE-2006-5856 EPSS 16%

    Stack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2006-5855 EPSS 28%

    Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attacker…