Skip to content
OpenAdvisories

Archive

29 December 2006

Vulnerabilities first published on this day (UTC), newest first.

← November 2006 2006 / December /29 January 2007 →
  1. 141
  2. 214
  3. 310
  4. 447
  5. 515
  6. 617
  7. 747
  8. 816
  9. 9 
  10. 1057
  11. 1119
  12. 1217
  13. 138
  14. 1462
  15. 1546
  16. 16 
  17. 17 
  18. 1831
  19. 198
  20. 2046
  21. 2129
  22. 223
  23. 2325
  24. 24 
  25. 25 
  26. 2623
  27. 2733
  28. 2833
  29. 2928
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2006-6826

    Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors…

  • Unscored —
    CVE-2006-6825

    Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2004-2669

    Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2004-2668

    SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via u…

  • Unscored —
    CVE-2004-2667

    Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attack…

  • Unscored —
    CVE-2006-6810 Public exploit

    Unspecified vulnerability in the clear_user_list function in src/main.c in DB Hub 0.3 allows remote attackers to cause …

  • Unscored —
    CVE-2006-6824 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow …

  • Unscored —
    CVE-2006-6814 Public exploit

    Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authentica…

  • Unscored —
    CVE-2006-6822 Public exploit

    myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, …

  • Unscored —
    CVE-2006-6812 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-6817

    AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, wh…

  • Unscored —
    CVE-2006-6813 Public exploit

    SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-6809 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubl…

  • Unscored —
    CVE-2006-6816 Public exploit

    Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-6820 Public exploit

    myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, whic…

  • Unscored —
    CVE-2006-6815

    Multiple cross-site scripting (XSS) vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated adm…

  • Unscored —
    CVE-2006-6819 Public exploit

    AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which a…

  • Unscored —
    CVE-2006-6818

    AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a dire…

  • Unscored —
    CVE-2006-6821 Public exploit

    myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which a…

  • Unscored —
    CVE-2006-6811 Public exploit EPSS 11%

    KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to …

  • Unscored —
    CVE-2006-6823 Public exploit

    PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to exec…

  • Unscored —
    CVE-2005-4821 Public exploit

    Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2005-4817

    Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of …

  • Unscored —
    CVE-2005-4822

    SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 a…

  • Unscored —
    CVE-2005-4819

    Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0…

  • Unscored —
    CVE-2005-4818

    Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-4820

    SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the rou…

  • Unscored —
    CVE-2003-1315

    SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute ar…