Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
November

CVEs published in November 2006

507 vulnerabilities, 29 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

ac4p mobileMultiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to...CVE-2006-5770Public exploit6.8 MediumNovember 6, 2006
fixpunkt gmbh admin.tool cms 3Multiple cross-site scripting (XSS) vulnerabilities in admin.tool CMS 3 and earlier allow remote...CVE-2006-57694.3 MediumNovember 6, 2006
cyberfolioMultiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when...CVE-2006-5768Public exploitEPSS 15.8%7.5 HighNovember 6, 2006
drake team cmsPHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846...CVE-2006-5767Public exploit6.8 MediumNovember 6, 2006
article system systemPHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote...CVE-2006-5766Public exploit7.5 HighNovember 6, 2006
article script scriptSQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote...CVE-2006-5765Public exploit7.5 HighNovember 6, 2006
free php scripts file hostingPHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier...CVE-2006-5764Public exploit7.5 HighNovember 6, 2006
free php scripts file hosting, image hosting +1 moreMultiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier...CVE-2006-5763Public exploit5.1 MediumNovember 6, 2006
free php scripts file hosting, image hosting +1 morePHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier...CVE-2006-5762Public exploit5.1 MediumNovember 6, 2006
rhadrix if-cmsCross-site scripting (XSS) vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows...CVE-2006-5761Public exploit4.3 MediumNovember 6, 2006
phpdynasiteMultiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote...CVE-2006-5760Public exploit7.5 HighNovember 6, 2006
rhadrix if-cmsindex.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full...CVE-2006-57595.0 MediumNovember 6, 2006
microsoft windows 2000, windows xp +1 moreThe Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through...CVE-2006-5758Public exploit7.2 HighNovember 6, 2006
linux kernelRace condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18...CVE-2006-5757Public exploit1.2 LowNovember 6, 2006
airmagnet enterpriseThe console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the...CVE-2006-57466.4 MediumNovember 6, 2006
microsoft xml core servicesUnspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX...CVE-2006-5745Public exploitEPSS 77.6%7.6 HighNovember 6, 2006
mobilesecure inc highwall endpoint, highwall enterprise +1 moreMultiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045...CVE-2006-57447.5 HighNovember 6, 2006
mobilesecure highwall endpoint, highwall enterprise +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Highwall Enterprise and Highwall Endpoint...CVE-2006-57434.3 MediumNovember 6, 2006
airmagnet enterpriseThe AirMagnet Enterprise console and Remote Sensor console (Laptop) in AirMagnet Enterprise...CVE-2006-57425.0 MediumNovember 6, 2006
airmagnet enterpriseMultiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307...CVE-2006-57414.3 MediumNovember 6, 2006
leicestershire communityportalsPHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire...CVE-2006-5739Public exploit7.5 HighNovember 6, 2006
punbbMultiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated...CVE-2006-57382.1 LowNovember 6, 2006
punbbPunBB uses a predictable cookie_seed value that can be derived from the time of registration of...CVE-2006-57377.2 HighNovember 6, 2006
punbbSQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is...CVE-2006-57365.1 MediumNovember 6, 2006
punbbDirectory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote...CVE-2006-5735EPSS 14.4%7.5 HighNovember 6, 2006
adaptive technology resource centre atutorPHPMailer Local file inclusionCVE-2006-5734Fix available7.5 HighNovember 6, 2006
postnuke software foundation postnukeDirectory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote...CVE-2006-5733Public exploit7.5 HighNovember 6, 2006
tgs cms cmsSQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers...CVE-2006-5732Public exploit5.0 MediumNovember 6, 2006
lithium cms cmsDirectory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows...CVE-2006-5731Public exploit6.4 MediumNovember 6, 2006
modxcmsPHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands...CVE-2006-5730Public exploit5.1 MediumNovember 6, 2006
yazd discussion forumYazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows...CVE-2006-57296.5 MediumNovember 6, 2006
dxmsoft xm easy personal ftp serverXM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial...CVE-2006-5728Public exploit4.0 MediumNovember 6, 2006
sazcartPHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote...CVE-2006-5727Public exploit5.1 MediumNovember 6, 2006
sun solarisalloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service ...CVE-2006-5726Public exploit4.9 MediumNovember 6, 2006
rpm package manager, ubuntu linux +1 moreHeap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4...CVE-2006-5466Fix available5.4 MediumNovember 6, 2006
aep networks smartgate ssl serverThe SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of...CVE-2006-5725Public exploit5.0 MediumNovember 4, 2006
mirabilis icqHeap-based buffer overflow the "Answering Service" function in ICQ 2003b Build 3916 allows local...CVE-2006-57242.1 LowNovember 4, 2006
dataparksearchSQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to...CVE-2006-57237.5 HighNovember 4, 2006
middlebury college segue cmsMultiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when...CVE-2006-5722Public exploit5.1 MediumNovember 4, 2006
agnitum outpost firewallThe \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause...CVE-2006-5721Public exploit4.9 MediumNovember 4, 2006
francisco burzi php-nukeSQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco...CVE-2006-5720Public exploit7.5 HighNovember 4, 2006
bytesfall explorer explorerSQL injection vulnerability in libs/sessions.lib.php in BytesFall Explorer (bfExplorer) 0.0.6...CVE-2006-57197.5 HighNovember 4, 2006
phpmyadminCross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows...CVE-2006-5718Fix available4.3 MediumNovember 4, 2006
zend google data client library previewMultiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData...CVE-2006-57174.3 MediumNovember 4, 2006
freenewsDirectory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to...CVE-2006-5716Public exploit5.0 MediumNovember 4, 2006
efs software easy address bookEasy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote...CVE-2006-5715Public exploit5.0 MediumNovember 4, 2006
efs software web serverEasy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote...CVE-2006-5714Public exploit5.0 MediumNovember 4, 2006
efs software web serverCross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 4.0 allows remote...CVE-2006-57134.3 MediumNovember 4, 2006
mirapoint webmailCross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject...CVE-2006-5712Public exploit4.3 MediumNovember 4, 2006
eci telecom b-focus wireless 802.11bg adsl2\+ routerECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary...CVE-2006-5711Public exploit5.0 MediumNovember 4, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open