Skip to content
OpenAdvisories

Archive

December 2006

Vulnerabilities first published in this month (UTC), newest first.

← November 2006 2006 / December January 2007 →
  1. 141
  2. 214
  3. 310
  4. 447
  5. 515
  6. 617
  7. 747
  8. 816
  9. 9 
  10. 1057
  11. 1119
  12. 1217
  13. 138
  14. 1462
  15. 1546
  16. 16 
  17. 17 
  18. 1831
  19. 198
  20. 2046
  21. 2129
  22. 223
  23. 2325
  24. 24 
  25. 25 
  26. 2623
  27. 2733
  28. 2833
  29. 2928
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

675 results · Feed

  • Unscored —
    CVE-2006-6471

    Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use …

  • Unscored —
    CVE-2006-6466

    Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers t…

  • Unscored —
    CVE-2006-6462 Public exploit

    PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to exec…

  • Unscored —
    CVE-2006-6473

    Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03…

  • Unscored —
    CVE-2006-6467

    Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do n…

  • Unscored —
    CVE-2006-6459

    Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-6461

    tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid…

  • Unscored —
    CVE-2006-6457

    tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive inf…

  • Unscored —
    CVE-2006-6458

    The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cilli…

  • Unscored —
    CVE-2006-6456 EPSS 34%

    Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execut…

  • Unscored —
    CVE-2006-6460

    Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid…

  • Unscored —
    CVE-2006-6452

    Multiple cross-site scripting (XSS) vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remot…

  • Unscored —
    CVE-2006-6453 Public exploit

    PHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated…

  • Unscored —
    CVE-2006-6447 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-6445 Public exploit

    Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and e…

  • Unscored —
    CVE-2006-6455

    Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and…

  • Unscored —
    CVE-2006-6451 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject …

  • Unscored —
    CVE-2006-6450 EPSS 22%

    Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.…

  • Unscored —
    CVE-2006-6444

    Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execu…

  • Unscored —
    CVE-2006-6449

    Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2006-6446 Public exploit

    SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote …

  • Unscored —
    CVE-2006-6448

    Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-6454

    execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands vi…

  • Unscored —
    CVE-2006-6383 Public exploit

    PHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a malicious path and a null …

  • Unscored —
    CVE-2006-6443

    Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in No…

  • Unscored —
    CVE-2006-6379 Public exploit EPSS 21%

    Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1…

  • Unscored —
    CVE-2006-6417 Public exploit

    PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allow…

  • Unscored —
    CVE-2006-6415

    PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers…

  • Unscored —
    CVE-2006-6422

    Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attacke…

  • Unscored —
    CVE-2006-6428

    Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allo…

  • Unscored —
    CVE-2006-6437

    ops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050…

  • Unscored —
    CVE-2006-6420

    Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content…

  • Unscored —
    CVE-2006-6419

    jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com…

  • Unscored —
    CVE-2006-6421 Public exploit EPSS 16%

    Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows …

  • Unscored —
    CVE-2006-6418

    Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows loca…

  • Unscored —
    CVE-2006-6413

    Cross-site scripting (XSS) vulnerability in Amateras sns 3.11 and earlier allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-6438

    Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leav…

  • Unscored —
    CVE-2006-6440

    Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03…

  • Unscored —
    CVE-2006-6436

    Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050…

  • Unscored —
    CVE-2006-6433

    Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does…