CVEs published in September 2006
550 vulnerabilities, 23 critical, 0 exploited.
- kde kdebaseThe KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which...10.0 High
- simplemachines smfSQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows...5.1 Medium
- phpnuke myheadlinesCross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke...6.8 Medium
- symantec gateway security** DISPUTED ** The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers...5.0 Medium
- mozilla firefoxMozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of...7.5 High
- microsoft ieInternet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in...7.5 High
- bernard pacques yet another community system cmsMultiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6...7.5 High
- deluxebbDeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows...7.5 High
- robert jewell discloser** DISPUTED ** PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell...7.5 High
- joomla jim component** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the JIM component for...7.5 High
- retro64 cr64loader activex controlBuffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to...7.5 High
- becubed compression plusStack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed...5.1 Medium
- joomla com comprofiler componentPHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0...6.8 Medium
- chxo feedsplitterCross-site scripting (XSS) vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers...6.8 Medium
- chxo feedsplitterEval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute...7.5 High
- chxo feedsplitterDirectory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read...5.0 Medium
- chxo feedsplitterCHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php...5.0 Medium
- e107e107 0.75 and earlier does not properly unset variables when the input data includes a numeric...7.5 High
- lyris list managerLyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by...6.5 Medium
- lyris list managerLyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for...6.5 Medium
- modulebased cms cms** DISPUTED ** PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows...7.5 High
- exbbMultiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when register_globals is...7.5 High
- hlstatsCross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to...6.8 Medium
- digi international inc anywhere usb5Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service (crash)...7.5 High
- isc bindBIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of...5.0 Medium
- isc bind, apple mac os x, mac os x server +1 more +3 moreBIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of...7.5 High
- gnu mailmanMultiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote...6.8 Medium
- gnu mailmanMailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified...5.0 Medium
- usermin, webmin +1 moreWebmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00")...6.8 Medium
- iss blackice pc protectionRapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows...4.6 Medium
- learn.com learncenterCross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows...6.8 Medium
- cerberus helpdesk(1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php...7.5 High
- linux kernelLinux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to...4.9 Medium
- dec openvms alphaNET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to...2.1 Low
- cms frogss frogssSQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote...7.5 High
- microsoft officeUnspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user...9.3 High
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass9.1 Critical
- plume-cms plume cmsMultiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote...7.5 High
- bernard pacques yet another community system cmsPHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System ...7.5 High
- bare concept media pheap cmsPHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows...7.5 High
- membrepassDirect static code injection vulnerability in include/change.php in membrepass 1.5 allows remote...7.5 High
- membrepassSQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to...7.5 High
- membrepassMultiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to...4.3 Medium
- devellion cubecartincludes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is...2.6 Low
- devellion cubecartSQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier,...7.5 High
- devellion cubecartCross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is...4.3 Medium
- digiappz freekotMultiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote...7.5 High
- 2wire inc homeportal, officeportal +1 moreThe web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and...5.0 Medium
- ibm aixUnspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute...7.2 High
- julian pawlowski capi4hylafaxc2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null...7.5 High