CVEs published in September 2006

550 vulnerabilities, 23 critical, 0 exploited.

• andreas gohr dokuwiki lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use... CVE-2006-5099 Fix available 7.5 HighSeptember 29, 2006
• andreas gohr dokuwiki lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of... CVE-2006-5098 Fix available 5.0 MediumSeptember 29, 2006
• net2ftp ** DISPUTED ** PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1... CVE-2006-5097 Disputed 7.5 HighSeptember 29, 2006
• virtuemart joomla ecommerrce edition cms Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as... CVE-2006-5096 Public exploit 6.8 MediumSeptember 29, 2006
• myphotos ** DISPUTED ** PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta... CVE-2006-5095 Disputed 7.5 HighSeptember 29, 2006
• phpbb xs xs PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain... CVE-2006-5094 Public exploit 5.1 MediumSeptember 29, 2006
• paul schudar tagmin control center PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard... CVE-2006-5093 Public exploit 7.5 HighSeptember 29, 2006
• a-blog PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote... CVE-2006-5092 Public exploit 7.5 HighSeptember 29, 2006
• hp hp-ux Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to... CVE-2006-5091 7.2 HighSeptember 29, 2006
• phoenix evolution cms Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote... CVE-2006-5090 Public exploit 6.8 MediumSeptember 29, 2006
• my-bic ** DISPUTED ** PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0... CVE-2006-5089 Public exploitDisputed 7.5 HighSeptember 29, 2006
• phpheaven phpmychat PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1... CVE-2006-5088 7.5 HighSeptember 29, 2006
• evobb Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote... CVE-2006-5087 Public exploit 7.5 HighSeptember 29, 2006
• plone Plone allows anonymous users to reset any users password through the web via Password Reset Tool CVE-2006-4247 Fix available 6.4 MediumSeptember 29, 2006
• pixel motion blog Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin... CVE-2006-5086 Public exploit 6.4 MediumSeptember 29, 2006
• pixel motion blog Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote... CVE-2006-5085 Public exploit EPSS 47.0% 7.5 HighSeptember 29, 2006
• skype technologies skype Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and... CVE-2006-5084 Public exploit EPSS 16.4% 7.5 HighSeptember 29, 2006
• phpbb security importal PHP remote file inclusion vulnerability in includes/functions_portal.php in Integrated MODs (IM)... CVE-2006-5083 7.5 HighSeptember 29, 2006
• sugarcrm sugar suite Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917)... CVE-2006-5082 7.5 HighSeptember 29, 2006
• jl webworks quickblogger PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote... CVE-2006-5081 7.5 HighSeptember 29, 2006
• six apart movable type Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to... CVE-2006-5080 4.3 MediumSeptember 29, 2006
• php arena pabugs PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and... CVE-2006-5079 Public exploit 7.5 HighSeptember 29, 2006
• polaring PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03... CVE-2006-5078 Public exploit 7.5 HighSeptember 29, 2006
• minerva PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith... CVE-2006-5077 Public exploit 5.1 MediumSeptember 29, 2006
• back-end cms Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote... CVE-2006-5076 Public exploit 7.5 HighSeptember 29, 2006
• sun solaris The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows... CVE-2006-5075 7.8 HighSeptember 29, 2006
• php invoice invoice Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers... CVE-2006-5074 Public exploit 5.1 MediumSeptember 29, 2006
• sun solaris, sunos +1 more Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of... CVE-2006-5073 7.8 HighSeptember 29, 2006
• openbsd openssh packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by... CVE-2006-4925 Fix available EPSS 15.0% 5.0 MediumSeptember 29, 2006
• eyeos project eyeos Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers... CVE-2006-5071 4.3 MediumSeptember 28, 2006
• facestones PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal... CVE-2006-5070 Public exploit 5.1 MediumSeptember 28, 2006
• typo3 Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9... CVE-2006-5069 2.6 LowSeptember 28, 2006
• brudaswen brudanews PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and... CVE-2006-5068 Public exploit 7.5 HighSeptember 28, 2006
• php system administration toolkit system administration toolkit ** DISPUTED ** PHP remote file inclusion vulnerability in loader.php in PHP System... CVE-2006-5067 Disputed 7.5 HighSeptember 28, 2006
• danphpsupport Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions... CVE-2006-5066 Public exploit 5.1 MediumSeptember 28, 2006
• zoomstats PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier,... CVE-2006-5065 Public exploit 5.1 MediumSeptember 28, 2006
• birdblog Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote... CVE-2006-5064 Public exploit 5.1 MediumSeptember 28, 2006
• stefan ritt elog web logbook Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject... CVE-2006-5063 5.1 MediumSeptember 28, 2006
• pblang PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4... CVE-2006-5062 Public exploit 7.5 HighSeptember 28, 2006
• advanced-clan-script PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script (AVCX) 3.4 and earlier... CVE-2006-5061 Public exploit 7.5 HighSeptember 28, 2006
• jamroom Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier... CVE-2006-5060 Public exploit 5.1 MediumSeptember 28, 2006
• wired community software wwwthreads Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote... CVE-2006-5059 5.1 MediumSeptember 28, 2006
• activision call of duty, call of duty 2, call of duty united offensive +2 more Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and... CVE-2006-5058 Public exploit EPSS 10.3% 7.5 HighSeptember 28, 2006
• ktools.net photostore Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote... CVE-2006-5057 Public exploit 5.1 MediumSeptember 28, 2006
• opial audio video download management Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1... CVE-2006-5056 Public exploit 5.1 MediumSeptember 28, 2006
• forum one syntaxcms PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1... CVE-2006-5055 Public exploit 7.5 HighSeptember 28, 2006
• iyzi forum forum SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows... CVE-2006-5054 Public exploit 7.5 HighSeptember 28, 2006
• web-news PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier... CVE-2006-5053 Public exploit 7.5 HighSeptember 28, 2006
• openssl, canonical ubuntu linux, debian linux +2 more The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8... CVE-2006-4343 Public exploitFix available EPSS 19.4% 4.3 MediumSeptember 28, 2006
• openssl Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8... CVE-2006-3738 Fix available EPSS 49.9% 10.0 HighSeptember 28, 2006
• Show olderLoading…