Archive
15 December 2006
Vulnerabilities first published on this day (UTC), newest first.
46 results · Feed
-
Unscored —
HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via a session (HAW) fi…
-
Unscored —CVE-2006-6604 Public exploit
Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read a…
-
Unscored —
explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to ca…
-
Unscored —CVE-2006-6598 Public exploit
Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt…
-
Unscored —
Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows rem…
-
Unscored —CVE-2006-6597 Public exploit
Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript…
-
Unscored —
Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrar…
-
Unscored —
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial …
-
Unscored —CVE-2006-6599 Public exploit
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharac…
-
Unscored —
Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_…
-
Unscored —
The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) data…
-
Unscored —CVE-2006-6586 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers …
-
Unscored —
Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service …
-
Unscored —
ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors …
-
Unscored —
PHP remote file inclusion vulnerability in fonctions/template.php in EXlor 1.0 allows remote attackers to execute arbit…
-
Unscored —
Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .CO…
-
Unscored —CVE-2006-6575 Public exploit
PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 an…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OF…
-
Unscored —CVE-2006-6581 Public exploit
PHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0 allows remote attackers …
-
Unscored —
Multiple buffer overflows in italkplus (Italk+) before 0.92.1 allow remote attackers to cause a denial of service (appl…
-
Unscored —
admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote at…
-
Unscored —
Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote a…
-
Unscored —
SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attackers to exe…
-
Unscored —CVE-2006-6590 Public exploit
PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitr…
-
Unscored —
Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to execute arb…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers t…
-
Unscored —
Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERROR…
-
Unscored —CVE-2006-6577 Public exploit
SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component in the Apache Open For …
-
Unscored —
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows att…
-
Unscored —CVE-2006-6593 Public exploit
PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to exe…
-
Unscored —CVE-2006-6592 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redire…
-
Unscored —
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION param…
-
Unscored —CVE-2006-6568 Public exploit
Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allo…
-
Unscored —
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to …
-
Unscored —
Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Acce…
-
Unscored —CVE-2006-6564 Public exploit
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to…
-
Unscored —
Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2…
-
Unscored —CVE-2006-6571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject a…