Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
279 results · Clear filters · Feed
-
Unscored —CVE-2006-6538 Public exploit
D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of…
-
Unscored —CVE-2006-6536 Public exploit
Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbi…
-
Unscored —CVE-2006-6544 Public exploit
Cross-site scripting (XSS) vulnerability in CM68 News allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —CVE-2006-6542 Public exploit
SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-6545 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_e…
-
Unscored —CVE-2006-6546 Public exploit
PHP remote file inclusion vulnerability in inc/shows.inc.php in cutenews aj-fork (CN:AJ) 167f and earlier allows remote…
-
Unscored —CVE-2006-6516 Public exploit
Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitra…
-
Unscored —CVE-2006-6523 Public exploit
Cross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows remote attackers to inje…
-
Unscored —CVE-2006-6519 Public exploit
SQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-6520 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2006-6526 Public exploit
PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute …
-
Unscored —CVE-2006-6524 Public exploit
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-6517 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2006-6521 Public exploit
SQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-6525 Public exploit
SQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-6518 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-6493 Public exploit
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDA…
-
Unscored —
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Pr…
-
Unscored —
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2006-6479 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-6462 Public exploit
PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to exec…
-
Unscored —CVE-2006-6453 Public exploit
PHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated…
-
Unscored —CVE-2006-6447 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbit…
-
Unscored —CVE-2006-6445 Public exploit
Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and e…
-
Unscored —CVE-2006-6451 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject …
-
Unscored —CVE-2006-6446 Public exploit
SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote …
-
Unscored —CVE-2006-6383 Public exploit
PHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a malicious path and a null …
-
Unscored —
Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1…
-
Unscored —CVE-2006-6417 Public exploit
PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows …
-
Unscored —CVE-2006-6416 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PhpLeague - Univert PhpLeague 0.81 allow remote attackers to exec…
-
Unscored —
Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execu…
-
Unscored —CVE-2006-6426 Public exploit
PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_gl…
-
Unscored —CVE-2006-6414 Public exploit
Multiple SQL injection vulnerabilities in dettaglio.asp in dol storye allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-6410 Public exploit
Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb pa…
-
Unscored —CVE-2006-6391 Public exploit
Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magi…
-
Unscored —CVE-2006-6396 Public exploit
Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arb…
-
Unscored —CVE-2006-6390 Public exploit
Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magi…
-
Unscored —CVE-2006-6387 Public exploit
Multiple SQL injection vulnerabilities in LINK Content Management Server (CMS) allow remote attackers to execute arbitr…
-
Unscored —CVE-2006-6389 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web scrip…