Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
675 results · Feed
-
Unscored —
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated …
-
Unscored —CVE-2006-6759 Public exploit
A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of …
-
Unscored —
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by a…
-
Unscored —CVE-2006-6755 Public exploit
Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/i…
-
Unscored —CVE-2006-6756 Public exploit
The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXP_CODE in mainfile.…
-
Unscored —
PHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows remote attackers to execut…
-
Unscored —CVE-2006-6746 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-6747 Public exploit
SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-6751 Public exploit
Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2006-6752 Public exploit
Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenan…
-
Unscored —
Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown i…
-
Unscored —CVE-2006-6750 Public exploit
Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2003-1314 Public exploit
PHP remote file inclusion vulnerability in admin/auth.php in EternalMart Guestbook (EMGB) 1.1 allows remote attackers t…
-
Unscored —CVE-2003-1313 Public exploit
Multiple PHP remote file inclusion vulnerabilities in EternalMart Mailing List Manager (EMLM) 1.32 allow remote attacke…
-
Unscored —CVE-2006-6739 Public exploit
PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PH…
-
Unscored —
Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier…
-
Unscored —
Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 …
-
Unscored —CVE-2006-6740 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute …
-
Unscored —CVE-2006-6732 Public exploit
PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2006-6734 Public exploit
Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.…
-
Unscored —
Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier…
-
Unscored —
phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3…
-
Unscored —
Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier…
-
Unscored —CVE-2006-6733 Public exploit
Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to i…
-
Unscored —
Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 o…
-
Unscored —CVE-2006-6741 Public exploit
Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary mess…
-
Unscored —
phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local …
-
Unscored —
modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote attackers to obtain sensit…
-
Unscored —
OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allow…
-
Unscored —CVE-2006-6738 Public exploit
PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to exe…
-
Unscored —
PHP remote file inclusion vulnerability in inertianews_class.php in inertianews 0.02 beta and earlier allows remote att…
-
Unscored —
Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to caus…
-
Unscored —CVE-2006-6729 Public exploit
Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-6726 Public exploit
PHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows remote attackers to exe…
-
Unscored —
Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary f…
-
Unscored —CVE-2006-6724 Public exploit
BolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to cause a denial of serv…
-
Unscored —
The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2006-6719 Public exploit
The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause…
-
Unscored —CVE-2006-6716 Public exploit
SQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader&downloader 3 allows remote att…
-
Unscored —CVE-2006-6722 Public exploit
Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct req…