Skip to content
OpenAdvisories

Archive

21 December 2006

Vulnerabilities first published on this day (UTC), newest first.

← November 2006 2006 / December /21 January 2007 →
  1. 141
  2. 214
  3. 310
  4. 447
  5. 515
  6. 617
  7. 747
  8. 816
  9. 9 
  10. 1057
  11. 1119
  12. 1217
  13. 138
  14. 1462
  15. 1546
  16. 16 
  17. 17 
  18. 1831
  19. 198
  20. 2046
  21. 2129
  22. 223
  23. 2325
  24. 24 
  25. 25 
  26. 2623
  27. 2733
  28. 2833
  29. 2928
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2006-6692 Public exploit

    Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (applicat…

    zabbix Debian
  • Unscored —
    CVE-2006-6693

    Multiple buffer overflows in zabbix before 20061006 allow attackers to cause a denial of service (application crash) an…

    zabbix Debian
  • Unscored —
    CVE-2006-6694 Public exploit

    Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2006-6688

    Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET) allows remote attackers…

  • Unscored —
    CVE-2006-6695

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to…

  • Unscored —
    CVE-2006-6691 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote attackers t…

  • Unscored —
    CVE-2006-6690 Public exploit

    rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, …

  • Unscored —
    CVE-2006-6687

    Cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (…

  • Unscored —
    CVE-2006-6686 Public exploit

    PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute a…

  • Unscored —
    CVE-2006-6689

    Multiple PHP remote file inclusion vulnerabilities in Paristemi 0.8.3 and earlier allow remote attackers to execute arb…

  • Unscored —
    CVE-2002-2221

    Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privil…

  • Unscored —
    CVE-2002-2219 Public exploit

    chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow …

  • Unscored —
    CVE-2002-2220

    Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local user…

  • Unscored —
    CVE-2006-6684

    Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2006-6679

    Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on a…

  • Unscored —
    CVE-2006-6682

    Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compa…

  • Unscored —
    CVE-2006-6683

    Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/s…

  • Unscored —
    CVE-2006-6104 Public exploit

    The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, wh…

    mono Debian
  • Unscored —
    CVE-2006-6685

    Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd 2.3.3 allows local users to cause a denial of service (appli…

  • Unscored —
    CVE-2006-6681

    Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers t…

  • Unscored —
    CVE-2006-6680

    Pedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc/chetcpasswd.allow, wh…

  • Unscored —
    CVE-2006-6675

    Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48…

  • Unscored —
    CVE-2006-6671 Public exploit

    SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-6676

    Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to …

  • Unscored —
    CVE-2006-6672

    Multiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-6674

    Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozek…

  • Unscored —
    CVE-2006-6678

    The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames whe…

    netrik Debian
  • Unscored —
    CVE-2006-6677

    ESET NOD32 Antivirus before 1.1743 allows remote attackers to cause a denial of service (crash) via a crafted .CHM file…

  • Unscored —
    CVE-2006-6673 Public exploit

    WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long (1) PASV, (2) LIST, (3) USER,…