Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
675 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypa…
-
Unscored —
Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applicat…
-
Unscored —
An unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting", which allows local users …
-
Unscored —
dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows rem…
-
Unscored —
eoc.py in Enemies of Carlotta (EoC) before 1.2.4 allows remote attackers to execute arbitrary commands via shell metach…
-
Medium 5.5
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerP…
-
Medium 5.5
Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using…
-
Unscored —
The (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista Beta 8.2, and CA Inte…
-
Unscored —CVE-2006-4702 EPSS 28%
Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Ser…
-
Unscored —
Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code v…
-
Unscored —
Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via lar…
-
Unscored —CVE-2006-2386 EPSS 30%
Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —
The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges …
-
Unscored —CVE-2006-5584 EPSS 32%
The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, wh…
-
Unscored —CVE-2006-6493 Public exploit
Buffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and earlier, when OpenLDA…
-
Unscored —
The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through …
-
Unscored —CVE-2006-6335 EPSS 13%
Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary …
-
Unscored —
SQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands via unspecified vecto…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow remote attackers to inject arbitr…
-
Unscored —
Adobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against cross-site scripting (X…
-
Unscored —
Adobe ColdFusion MX7 allows remote attackers to obtain sensitive information via a URL request (1) for a non-existent (…
-
Unscored —CVE-2006-5581 EPSS 38%
Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certai…
-
Unscored —CVE-2006-5578 EPSS 23%
Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sen…
-
Unscored —CVE-2006-5583 EPSS 55%
Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly o…
-
Unscored —CVE-2006-5579 EPSS 33%
Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain er…
-
Unscored —CVE-2006-5577 EPSS 27%
Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses …
-
Unscored —
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Pr…
-
Unscored —
Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack overflow and application cra…
-
Unscored —
Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2006-6479 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary w…
-
Unscored —
admin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain sensitive information via …
-
Unscored —
Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2…
-
Unscored —
smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores cert…
-
Unscored —
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do n…
-
Unscored —
Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do n…
-
Unscored —
viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a sm…
-
Unscored —
The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x be…
-
Unscored —
Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitra…
-
Unscored —
Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and exe…
-
Unscored —
The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before …