14 December 2006

62 results · Feed

• Unscored —
  CVE-2006-6524 Public exploit

  SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbi…

  Dec 14, 2006
• Unscored —
  CVE-2006-6534

  Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 3.0a3 allow remote attackers to inject arbitrary web …

  Dec 14, 2006
• Unscored —
  CVE-2006-6515

  Mantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead of a more privileged ro…

  Dec 14, 2006
• Unscored —
  CVE-2006-6517 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitra…

  Dec 14, 2006
• Unscored —
  CVE-2006-6531

  Cross-site scripting (XSS) vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to …

  Dec 14, 2006
• Unscored —
  CVE-2006-6530

  SQL injection vulnerability in the Help Tip module before 4.7.x-1.0 for Drupal allows remote attackers to execute arbit…

  Dec 14, 2006
• Unscored —
  CVE-2006-6532

  Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject a…

  Dec 14, 2006
• Unscored —
  CVE-2006-6512

  Directory traversal vulnerability in the Browse function (/browse URI) in Winamp Web Interface (Wawi) 7.5.13 and earlie…

  Dec 14, 2006
• Unscored —
  CVE-2006-6513

  The CControl::Download function (/dl URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier allows remote authenticated…

  Dec 14, 2006
• Unscored —
  CVE-2006-6529

  The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, whic…

  Dec 14, 2006
• Unscored —
  CVE-2006-6521 Public exploit

  SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL…

  Dec 14, 2006
• Unscored —
  CVE-2006-6525 Public exploit

  SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbi…

  Dec 14, 2006
• Unscored —
  CVE-2006-6533

  Directory traversal vulnerability in admin/templates_boxes_layout.php in osCommerce 3.0a3 allows remote attackers to in…

  Dec 14, 2006
• Unscored —
  CVE-2006-6518 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web scrip…

  Dec 14, 2006
• Unscored —
  CVE-2006-6508

  Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.21 allows remote authenticated users to send unauthorized …

  Dec 14, 2006
• Unscored —
  CVE-2006-6509

  Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypa…

  Dec 14, 2006
• Unscored —
  CVE-2006-6107

  Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applicat…

  dbus Debian
  Dec 14, 2006
• Unscored —
  CVE-2006-6510

  An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users …

  Dec 14, 2006
• Unscored —
  CVE-2006-6511

  dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows rem…

  Dec 14, 2006
• Unscored —
  CVE-2006-5875

  eoc.py in Enemies of Carlotta (EoC) before 1.2.4 allows remote attackers to execute arbitrary commands via shell metach…

  Dec 14, 2006
• Medium 5.5
  CVE-2006-5649

  Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerP…

  Dec 14, 2006
• Medium 5.5
  CVE-2006-5648

  Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using…

  Dec 14, 2006