Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
675 results · Feed
-
Unscored —
Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote a…
-
Unscored —
SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attackers to exe…
-
Unscored —CVE-2006-6590 Public exploit
PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitr…
-
Unscored —
Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to execute arb…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers t…
-
Unscored —
Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERROR…
-
Unscored —CVE-2006-6577 Public exploit
SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component in the Apache Open For …
-
Unscored —
The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows att…
-
Unscored —CVE-2006-6593 Public exploit
PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to exe…
-
Unscored —CVE-2006-6592 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder does not ensure that the TARGET parameter names a valid redire…
-
Unscored —
siteminderagent/SmMakeCookie.ccc in Netegrity SiteMinder places a session ID string in the value of the SMSESSION param…
-
Unscored —CVE-2006-6568 Public exploit
Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allo…
-
Unscored —
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to …
-
Unscored —
Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Acce…
-
Unscored —CVE-2006-6564 Public exploit
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to…
-
Unscored —
Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2…
-
Unscored —CVE-2006-6571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject a…
-
Unscored —CVE-2006-6566 Public exploit
PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module…
-
Unscored —
Unrestricted file upload vulnerability in upload.php in GenesisTrader 1.0 allows remote authenticated users to upload a…
-
Unscored —CVE-2006-6567 Public exploit
PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxB…
-
Unscored —CVE-2006-6563 Public exploit
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before …
-
Unscored —CVE-2006-6569 Public exploit
form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive info…
-
Unscored —
Format string vulnerability in the host chooser window (gdmchooser) in GNOME Foundation Display Manager (gdm) allows lo…
-
Unscored —
The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 befo…
-
Unscored —
Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working direct…
-
Unscored —
The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, …
-
Unscored —CVE-2006-6222 EPSS 13%
Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5…
-
Unscored —CVE-2006-5822 EPSS 12%
Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5…
-
Unscored —
Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmen…
-
Unscored —CVE-2006-6551 Public exploit
PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php in Tuc…
-
Unscored —CVE-2006-6560 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) P…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated us…
-
Unscored —
Multiple SQL injection vulnerabilities in EasyFill before 0.5.1 allow remote attackers to execute arbitrary SQL command…
-
Unscored —
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to e…
-
Unscored —CVE-2006-6553 Public exploit
PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allow…
-
Unscored —CVE-2006-6550 Public exploit
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2006-6558 Public exploit
Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a denial of service via a long series of "?A" sequences in…
-
Unscored —CVE-2006-6552 Public exploit
PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote…