CVEs published in November 2006
507 vulnerabilities, 29 critical, 0 exploited.
- jonathon j. freeman ovbbMultiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact...10.0 High
- cisco secure desktopThe installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions ...4.6 Medium
- cisco secure desktopCisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop...4.6 Medium
- cisco secure desktopSSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser...2.1 Low
- microsoft ieMicrosoft Internet Explorer 7 allows remote attackers to cause a security certificate from a...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8,...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and...7.5 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8,...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +1 more +3 moreMozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1...6.4 Medium
- gnu texinfoBuffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2)...4.6 Medium
- advanced guestbook guestbookPHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote...7.5 High
- mxbb smartor albumPHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album...7.5 High
- the web drivers simple forumSQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated...7.5 High
- owfsThe owserver module in owfs and owhttpd 2.5p5 and earlier does not properly check the path type,...5.0 Medium
- xenis xenis.creator cmsCross-site scripting (XSS) vulnerability in default.asp in xenis.creator CMS allows remote...2.6 Low
- xenis xenis.creator cmsMultiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow...6.8 Medium
- xenis xenis.creator cmsSQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to...7.5 High
- xenis xenis.creator cmsMultiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers...7.5 High
- soholaunch pro editionMultiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier,...7.5 High
- openemrMultiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when...7.5 High
- openbsd opensshUnspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...7.5 High
- xlink technology omni-nfs x enterpriseUnspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute...7.5 High
- stefan ritt elog web logbookMultiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow...2.6 Low
- stefan ritt elog web logbookMultiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote...7.5 High
- jgaa warftpdWar FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of...4.0 Medium
- iprimal forumsPHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal...7.5 High
- iprimal forumsadmin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication...7.5 High
- e107Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers...7.5 High
- sap web application serverUnspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before...5.0 Medium
- sap web application serverUnspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and...4.6 Medium
- mozilla firefox** DISPUTED ** Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of...7.8 High
- iodineStack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to...7.5 High
- digioz guestbooklist.php in DigiOz Guestbook before 1.7.1 allows remote attackers to obtain sensitive information...5.0 Medium
- aol icqThe ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers...7.5 High
- xlink technology omni-nfs serverStack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to...7.5 High
- openldap, canonical ubuntu linux +1 moreOpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via...7.5 High
- linux-ftpd-sslftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID,...4.6 Medium
- creasito e-commerce content managerCreasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and...7.5 High
- ariadne cms** DISPUTED ** Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to...7.5 High
- enlightenment imlib2Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions,...5.1 Medium
- enlightenment imlib2Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions,...2.6 Low
- enlightenment imlib2loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote...2.6 Low
- enlightenment imlib2Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of...5.1 Medium
- linux kernelip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1)...7.5 High
- funkboardCross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006...6.8 Medium
- hyper nikki system nikki systemCross-site scripting (XSS) vulnerability in Hyper NIKKI System before 2.19.9 allows remote...4.3 Medium
- freewebshopDirectory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote...5.0 Medium
- freewebshopMultiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote...7.5 High
- arkoon ssl360Cross-site scripting (XSS) vulnerability in Arkoon SSL360 1.0 and 2.0 before 2.0/2 allows remote...4.3 Medium
- Show moreLoading…