Skip to content
OpenAdvisories

Archive

15 December 2006

Vulnerabilities first published on this day (UTC), newest first.

22 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6604 Public exploit

    Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read a…

  • Unscored —
    CVE-2006-6602 Public exploit EPSS 15%

    explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to ca…

  • Unscored —
    CVE-2006-6598 Public exploit

    Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt…

  • Unscored —
    CVE-2006-6597 Public exploit

    Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript…

  • Unscored —
    CVE-2006-6601 Public exploit EPSS 19%

    Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial …

  • Unscored —
    CVE-2006-6599 Public exploit

    maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharac…

  • Unscored —
    CVE-2006-6586 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers …

  • Unscored —
    CVE-2006-6576 Public exploit EPSS 67%

    Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2006-6575 Public exploit

    PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 an…

  • Unscored —
    CVE-2006-6581 Public exploit

    PHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0 allows remote attackers …

  • Unscored —
    CVE-2006-6590 Public exploit

    PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-6577 Public exploit

    SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to e…

  • Unscored —
    CVE-2006-6593 Public exploit

    PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to exe…

  • Unscored —
    CVE-2006-6592 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code v…

  • Unscored —
    CVE-2006-6568 Public exploit

    Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allo…

  • Unscored —
    CVE-2006-6565 Public exploit Scanner template EPSS 71%

    FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to …

  • Unscored —
    CVE-2006-6564 Public exploit

    FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to…

  • Unscored —
    CVE-2006-6571 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject a…

  • Unscored —
    CVE-2006-6566 Public exploit

    PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module…

  • Unscored —
    CVE-2006-6567 Public exploit

    PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxB…

  • Unscored —
    CVE-2006-6563 Public exploit

    Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before …

  • Unscored —
    CVE-2006-6569 Public exploit

    form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive info…