Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
675 results · Feed
-
Unscored —CVE-2006-6632 Public exploit
PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-6625 Public exploit
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arb…
-
Unscored —CVE-2006-6633 Public exploit
PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attac…
-
Unscored —CVE-2006-6619 Public exploit
AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows …
-
Unscored —
AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows local use…
-
Unscored —
Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify a proces…
-
Unscored —
Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which allows loc…
-
Unscored —CVE-2006-6613 Public exploit
Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabl…
-
Unscored —CVE-2006-6611 Public exploit
PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary…
-
Unscored —
Multiple SQL injection vulnerabilities in Clarens jclarens before 0.6.2 allow remote attackers to execute arbitrary SQL…
-
Unscored —
Unspecified vulnerability in SSH key based authentication in HP Integrated Lights Out (iLO) 1.70 through 1.87, and iLO …
-
Unscored —
Nexuiz before 2.2.1 allows remote attackers to cause a denial of service (resource exhaustion or crash) via unspecified…
-
Unscored —CVE-2006-6615 Public exploit
PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mx…
-
Unscored —
The Java Key Store (JKS) for WebSphere Application Server (WAS) for IBM Tivoli Identity Manager (ITIM) 4.6 places the J…
-
Unscored —
clientcommands in Nexuiz before 2.2.1 has unknown impact and remote attack vectors related to "remote console command i…
-
Unscored —
index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access t…
-
Unscored —CVE-2006-6612 Public exploit
PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary P…
-
Unscored —
The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enab…
-
Unscored —
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code …
-
Unscored —
HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via a session (HAW) fi…
-
Unscored —CVE-2006-6604 Public exploit
Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read a…
-
Unscored —
explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to ca…
-
Unscored —CVE-2006-6598 Public exploit
Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt…
-
Unscored —
Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows rem…
-
Unscored —CVE-2006-6597 Public exploit
Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript…
-
Unscored —
Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrar…
-
Unscored —
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial …
-
Unscored —CVE-2006-6599 Public exploit
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharac…
-
Unscored —
Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_…
-
Unscored —
The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) data…
-
Unscored —CVE-2006-6586 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers …
-
Unscored —
Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service …
-
Unscored —
ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors …
-
Unscored —
PHP remote file inclusion vulnerability in fonctions/template.php in EXlor 1.0 allows remote attackers to execute arbit…
-
Unscored —
Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .CO…
-
Unscored —CVE-2006-6575 Public exploit
PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 an…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OF…
-
Unscored —CVE-2006-6581 Public exploit
PHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0 allows remote attackers …
-
Unscored —
Multiple buffer overflows in italkplus (Italk+) before 0.92.1 allow remote attackers to cause a denial of service (appl…
-
Unscored —
admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote at…