CVEs published in November 2006
507 vulnerabilities, 29 critical, 0 exploited.
- trend micro officescan Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro... 7.5 High
- trend micro officescan Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3... 7.5 High
- neocrome seditio SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10... 7.5 High
- blogn Cross-site scripting (XSS) vulnerability in admin.php in Blogn before 1.9.4 allows remote... 6.8 Medium
- horde kronolith Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x... 7.5 High
- tdiary Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126... 4.3 Medium
- apple mac os x Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6... 7.2 High
- apple mac os x WebKit in Apple Mac OS X 10.3.x through 10.3.9 and 10.4 through 10.4.8 allows remote attackers to... 6.8 Medium
- apple mac os x The VPN service in Apple Mac OS X 10.3.x through 10.3.9 and 10.4.x through 10.4.8 does not... 7.2 High
- apple mac os x The Security Framework in Apple Mac OS X 10.3.9, and 10.4.x before 10.4.7, does not properly... 7.5 High
- apple mac os x The Online Certificate Status Protocol (OCSP) service in the Security Framework in Apple Mac OS X... 5.0 Medium
- apple mac os x The Security Framework in Apple Mac OS X 10.4 through 10.4.8 allows remote attackers to cause a... 5.0 Medium
- apple mac os x The Security Framework in Apple Mac OS X 10.3.x up to 10.3.9 does not properly prioritize... 5.0 Medium
- apple mac os x Buffer overflow in PPP on Apple Mac OS X 10.4.x up to 10.4.8 and 10.3.x up to 10.3.9, when PPPoE... 7.5 High
- apple mac os x The Installer application in Apple Mac OS X 10.4.8 and earlier, when used by a user with Admin... 10.0 High
- apple mac os x The FTP server in Apple Mac OS X 10.4.8 and earlier, when FTP Access is enabled, will crash when... 4.0 Medium
- apple mac os x Heap-based buffer overflow in the Finder in Apple Mac OS X 10.4.8 and earlier allows user... 5.1 Medium
- apple mac os x Unspecified vulnerability in CFNetwork in Mac OS 10.4.8 and earlier allows user-assisted remote... 5.1 Medium
- apple mac os x Stack-based buffer overflow in the Apple Type Services (ATS) server in Mac OS 10.4.8 and earlier... 5.1 Medium
- apple mac os x Multiple buffer overflows in the Apple Type Services (ATS) server in Mac OS X 10.4 through 10.4.8... 7.2 High
- apple mac os x The Apple Type Services (ATS) server in Mac OS X 10.4.8 and earlier does not securely create log... 4.6 Medium
- mplayer, xine real media input plugin +1 more Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for... 7.5 High
- proftpd project proftpd Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1... 7.5 High
- libgsf Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library... 7.5 High
- gnupg Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and... 6.8 Medium
- businessobjects crystal enterprise Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which... 7.5 High
- tiki tikiwiki cms\/groupware tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam"... 7.5 High
- active php bookmarks php bookmarks ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and... 7.5 High
- ryan demmer joomla content editor Cross-site scripting (XSS) vulnerability in jce.php in the JCE Admin Component in Ryan Demmer... 6.8 Medium
- freebsd, netbsd +1 more ** DISPUTED ** ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove... 7.2 High
- openbsd The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly... 7.2 High
- tiki tikiwiki cms\/groupware Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows... 4.3 Medium
- tiki tikiwiki cms\/groupware Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows... 4.3 Medium
- doug luxem liberum help desk Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow... 7.5 High
- doug luxem liberum help desk SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier... 7.5 High
- deskpro Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1... 6.8 Medium
- ace helpdesk helpdesk, inverseflow help desk +1 more Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b)... 6.8 Medium
- michaelis freunde contentnow SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers... 7.5 High
- hscripts hiox star rating system script Cross-site scripting (XSS) vulnerability in auth/message.php in HIOX Star Rating System Script ... 4.3 Medium
- hscripts hiox star rating system script Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script (HSRS)... 7.5 High
- hscripts hiox star rating system script PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1... 7.5 High
- vspin.net classified system Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow... 4.3 Medium
- vspin.net classified system Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers... 7.5 High
- messagerie locale locale PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows... 7.5 High
- owllib PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows... 7.5 High
- jiros faq manager SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to... 7.5 High
- jiros links manager Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager... 6.8 Medium
- jiros links manager Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute... 7.5 High
- takeshi kanno haru free pdf library Buffer overflow in the HPDF_Page_Circle function in hpdf_page_operator.c in Takeshi Kanno Haru... 2.6 Low
- cryptocard crypto-server CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData... 2.1 Low
- Show olderLoading…