Skip to content
OpenAdvisories

Archive

29 December 2006

Vulnerabilities first published on this day (UTC), newest first.

← November 2006 2006 / December /29 January 2007 →
  1. 141
  2. 214
  3. 310
  4. 447
  5. 515
  6. 617
  7. 747
  8. 816
  9. 9 
  10. 1057
  11. 1119
  12. 1217
  13. 138
  14. 1462
  15. 1546
  16. 16 
  17. 17 
  18. 1831
  19. 198
  20. 2046
  21. 2129
  22. 223
  23. 2325
  24. 24 
  25. 25 
  26. 2623
  27. 2733
  28. 2833
  29. 2928
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6810 Public exploit

    Unspecified vulnerability in the clear_user_list function in src/main.c in DB Hub 0.3 allows remote attackers to cause …

  • Unscored —
    CVE-2006-6824 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow …

  • Unscored —
    CVE-2006-6814 Public exploit

    Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authentica…

  • Unscored —
    CVE-2006-6822 Public exploit

    myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, …

  • Unscored —
    CVE-2006-6812 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-6813 Public exploit

    SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-6809 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubl…

  • Unscored —
    CVE-2006-6816 Public exploit

    Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-6820 Public exploit

    myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, whic…

  • Unscored —
    CVE-2006-6819 Public exploit

    AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which a…

  • Unscored —
    CVE-2006-6821 Public exploit

    myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which a…

  • Unscored —
    CVE-2006-6811 Public exploit EPSS 11%

    KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to …

  • Unscored —
    CVE-2006-6823 Public exploit

    PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to exec…

  • Unscored —
    CVE-2005-4821 Public exploit

    Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbi…