Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
279 results · Clear filters · Feed
-
Unscored —CVE-2006-6722 Public exploit
Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct req…
-
Unscored —CVE-2006-6721 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers t…
-
Unscored —CVE-2006-6720 Public exploit
PHP remote file inclusion vulnerability in admin/index_sitios.php in Azucar CMS 1.3 allows remote attackers to execute …
-
Unscored —CVE-2006-6711 Public exploit
PHP remote file inclusion vulnerability in compteur/mapage.php in Newxooper 0.9.1 allows remote attackers to execute ar…
-
Unscored —CVE-2006-6710 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute a…
-
Unscored —
Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace E…
-
Unscored —CVE-2006-6703 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-6709 Public exploit
Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary …
-
Unscored —CVE-2006-6708 Public exploit
Cross-site scripting (XSS) vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to…
-
Unscored —CVE-2006-6715 Public exploit
PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enab…
-
Unscored —
CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remot…
-
Unscored —CVE-2006-6696 Public exploit
Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calli…
-
Unscored —CVE-2006-6692 Public exploit
Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (applicat…
-
Unscored —CVE-2006-6694 Public exploit
Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-6691 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote attackers t…
-
Unscored —CVE-2006-6690 Public exploit
rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, …
-
Unscored —CVE-2006-6686 Public exploit
PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute a…
-
Unscored —CVE-2002-2219 Public exploit
chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow …
-
Unscored —CVE-2006-6104 Public exploit
The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, wh…
-
Unscored —CVE-2006-6671 Public exploit
SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-6673 Public exploit
WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long (1) PASV, (2) LIST, (3) USER,…
-
Unscored —CVE-2006-6660 Public exploit
The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote…
-
Unscored —
Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute…
-
Unscored —CVE-2006-6661 Public exploit
Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitra…
-
Unscored —CVE-2006-6666 Public exploit
PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to…
-
Unscored —CVE-2006-4814 Public exploit
The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspeci…
-
Unscored —
The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a…
-
Unscored —CVE-2006-6644 Public exploit
PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting) 1.1.2 and earlier mo…
-
Unscored —CVE-2006-6645 Public exploit
PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links (mx_links) 2.05 and ea…
-
Unscored —CVE-2006-6642 Public exploit
SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-6643 Public exploit
Fightersoft Multimedia Star FTP server 1.10 allows remote attackers to cause a denial of service (crash) via multiple R…
-
Unscored —CVE-2006-6648 Public exploit
PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attacke…
-
Unscored —CVE-2006-6651 Public exploit
Race condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers to cause memory corrup…
-
Unscored —
Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* befor…
-
Unscored —CVE-2006-6650 Public exploit
PHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts) 1.0.0 and earlier module for …
-
Unscored —CVE-2006-6640 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary…
-
Unscored —CVE-2006-6628 Public exploit
Integer overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a denial of service (applic…
-
Unscored —CVE-2006-6634 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for …
-
Unscored —CVE-2006-6624 Public exploit
The FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of service (application crash) …
-
Unscored —CVE-2006-6631 Public exploit
PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers …