CVEs published in October 2006
546 vulnerabilities, 65 critical, 0 exploited.
- mozilla firefox, seamonkey +1 more Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service... 5.0 Medium
- ig shop shop Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote... 6.8 Medium
- ig shop shop Cross-site scripting (XSS) vulnerability in change_pass.php in iG Shop 1.4 allows remote... 6.8 Medium
- hosting controller controller Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to (1) delete the virtual... 7.5 High
- hosting controller controller Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote... 7.5 High
- unisor cms cms SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote... 7.5 High
- qnecms Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote... 7.5 High
- phpfaber content management system Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber... 4.3 Medium
- nx n x wcms PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional... 5.1 Medium
- mpcs Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System (MPCS) 1.0.0 and... 7.5 High
- ee tool tool PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool (EE Tool) 0... 7.5 High
- coppermine photo gallery SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote... 7.5 High
- ask rave rave PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before... 7.5 High
- minibill PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3... 7.5 High
- linux kernel The seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18... 2.1 Low
- bytesfall explorer explorer Multiple SQL injection vulnerabilities in BytesFall Explorer (bfExplorer) 0.0.7.1 and earlier... 7.5 High
- acme labs thttpd thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or... 7.2 High
- netref Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers... 5.0 Medium
- thepeak file upload manager Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote... 7.5 High
- openpbs, suse linux +1 more Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow... 10.0 High
- textpattern PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals... 7.5 High
- microsoft windows xp, windows nt helper components +1 more Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet... 2.6 Low
- mp3 streaming downsampler streaming downsampler PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when... 7.5 High
- michel pradel gestart PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when... 7.5 High
- toshiba bluetooth stack Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and... 10.0 High
- fully modded phpbb modded phpbb PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as... 7.5 High
- torrentflux Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list... 5.0 Medium
- drupal extended tracker SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows... 7.5 High
- inca im-204 adsl router Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to... 5.0 Medium
- phpcards Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow... 6.8 Medium
- phpcards Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers... 7.5 High
- snitz communications forums 2000 SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers... 7.5 High
- xsupplicant Multiple memory leaks in xsupplicant before 1.2.6, and possibly other versions, allow attackers... 4.0 Medium
- xsupplicant Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6,... 9.0 High
- axalto protiva Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files... 2.1 Low
- oracle apex Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before... 4.3 Medium
- webgeneius goop gallery Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other... 4.3 Medium
- minihttp web forum file sharing sever powerpack join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or... 7.5 High
- aep networks smartgate ssl server Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers... 7.5 High
- wireshark Unspecified vulnerability in the AirPcap support in Wireshark (formerly Ethereal) 0.99.3 has... 5.0 Medium
- wireshark Unspecified vulnerability in the WBXML dissector in Wireshark (formerly Ethereal) 0.10.11 through... 5.0 Medium
- wireshark Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through... 7.5 High
- wvware Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as... 5.1 Medium
- wireshark Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows... 5.0 Medium
- wireshark Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows... 5.0 Medium
- wireshark epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly... 5.0 Medium
- university of british columbia ipeer PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly... 7.5 High
- neo japan desknets Buffer overflow in Desknet's (niokeru) before 5.0J R1.0 might allow remote authenticated users to... 6.5 Medium
- pacos drivers pacpoll Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by... 7.5 High
- pacos drivers pacpoll Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote... 5.0 Medium
- Show olderLoading…