Skip to content
OpenAdvisories

Archive

26 December 2006

Vulnerabilities first published on this day (UTC), newest first.

← November 2006 2006 / December /26 January 2007 →
  1. 141
  2. 214
  3. 310
  4. 447
  5. 515
  6. 617
  7. 747
  8. 816
  9. 9 
  10. 1057
  11. 1119
  12. 1217
  13. 138
  14. 1462
  15. 1546
  16. 16 
  17. 17 
  18. 1831
  19. 198
  20. 2046
  21. 2129
  22. 223
  23. 2325
  24. 24 
  25. 25 
  26. 2623
  27. 2733
  28. 2833
  29. 2928
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2006-6739 Public exploit

    PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-6736

    Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier…

  • Unscored —
    CVE-2006-6745

    Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 …

  • Unscored —
    CVE-2006-6740 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2006-6732 Public exploit

    PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-6734 Public exploit

    Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.…

  • Unscored —
    CVE-2006-6731

    Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier…

  • Unscored —
    CVE-2006-6744

    phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3…

  • Unscored —
    CVE-2006-6737

    Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier…

  • Unscored —
    CVE-2006-6733 Public exploit

    Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to i…

  • Unscored —
    CVE-2006-6742

    Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 o…

  • Unscored —
    CVE-2006-6741 Public exploit

    Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary mess…

  • Unscored —
    CVE-2006-6743

    phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local …

  • Unscored —
    CVE-2006-6735

    modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote attackers to obtain sensit…

  • Unscored —
    CVE-2006-6730

    OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allow…

  • Unscored —
    CVE-2006-6738 Public exploit

    PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-6727

    PHP remote file inclusion vulnerability in inertianews_class.php in inertianews 0.02 beta and earlier allows remote att…

  • Unscored —
    CVE-2006-6728

    Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to caus…

  • Unscored —
    CVE-2006-6729 Public exploit

    Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-6726 Public exploit

    PHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows remote attackers to exe…

  • Unscored —
    CVE-2006-6725

    Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary f…

  • Unscored —
    CVE-2006-6724 Public exploit

    BolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to cause a denial of serv…

  • Unscored —
    CVE-2006-6723 Public exploit EPSS 37%

    The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (…