Skip to content
OpenAdvisories

Archive

18 December 2006

Vulnerabilities first published on this day (UTC), newest first.

← November 2006 2006 / December /18 January 2007 →
  1. 141
  2. 214
  3. 310
  4. 447
  5. 515
  6. 617
  7. 747
  8. 816
  9. 9 
  10. 1057
  11. 1119
  12. 1217
  13. 138
  14. 1462
  15. 1546
  16. 16 
  17. 17 
  18. 1831
  19. 198
  20. 2046
  21. 2129
  22. 223
  23. 2325
  24. 24 
  25. 25 
  26. 2623
  27. 2733
  28. 2833
  29. 2928
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2006-6621

    Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, which allow…

  • Unscored —
    CVE-2006-6628 Public exploit

    Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (applic…

  • Unscored —
    CVE-2006-6634 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for …

  • Unscored —
    CVE-2006-6624 Public exploit

    The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service (application crash) …

  • Unscored —
    CVE-2006-6617 EPSS 20%

    projectserver/logon/pdsrequest.asp in Microsoft Project Server 2003 allows remote authenticated users to obtain the MSP…

  • Unscored —
    CVE-2006-6623

    Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which allows loc…

  • Unscored —
    CVE-2006-6629

    lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictiv…

  • Unscored —
    CVE-2006-6631 Public exploit

    PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-6635 Public exploit

    PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute …

  • Unscored —
    CVE-2006-6630

    PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-6626

    Cross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-6627

    Integer overflow in the packed PE file parsing implementation in BitDefender products before 20060829, including Antivi…

  • Unscored —
    CVE-2006-6632 Public exploit

    PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-6625 Public exploit

    Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-6633 Public exploit

    PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attac…

  • Unscored —
    CVE-2006-6619 Public exploit

    AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows …

  • Unscored —
    CVE-2006-6618

    AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows local use…

  • Unscored —
    CVE-2006-6622

    Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a proces…

  • Unscored —
    CVE-2006-6620

    Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which allows loc…

  • Unscored —
    CVE-2006-6613 Public exploit

    Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabl…

  • Unscored —
    CVE-2006-6611 Public exploit

    PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-6606

    Multiple SQL injection vulnerabilities in Clarens jclarens before 0.6.2 allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-6608

    Unspecified vulnerability in SSH key based authentication in HP Integrated Lights Out (iLO) 1.70 through 1.87, and iLO …

  • Unscored —
    CVE-2006-6609

    Nexuiz before 2.2.1 allows remote attackers to cause a denial of service (resource exhaustion or crash) via unspecified…

    nexuiz Debian
  • Unscored —
    CVE-2006-6615 Public exploit

    PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mx…

  • Unscored —
    CVE-2006-6607

    The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the J…

  • Unscored —
    CVE-2006-6610

    clientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to "remote console command i…

    nexuiz Debian
  • Unscored —
    CVE-2006-6616

    index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access t…

  • Unscored —
    CVE-2006-6612 Public exploit

    PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-6614

    The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enab…

    fai Debian
  • Unscored —
    CVE-2006-5872

    login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code …

    sql-ledger Debian