Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
November

CVEs published in November 2006

507 vulnerabilities, 29 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

edgewall software tracEdgewall Trac Cross-site request forgery (CSRF) vulnerabilityCVE-2006-5878Fix available7.5 HighNovember 12, 2006
phpmantaDirectory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier...CVE-2006-5866Public exploit6.4 MediumNovember 11, 2006
damien benier myalbumPHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows...CVE-2006-5865Public exploit7.5 HighNovember 11, 2006
gnu gvStack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly...CVE-2006-5864Public exploitFix availableEPSS 16.1%5.1 MediumNovember 11, 2006
otterware letterit2PHP remote file inclusion vulnerability in inc/session.php for LetterIt 2 allows remote attackers...CVE-2006-5863Public exploit7.5 HighNovember 11, 2006
network administration visualized administration visualizedDirectory traversal vulnerability in the session mechanism of the web interface for Network...CVE-2006-58624.6 MediumNovember 11, 2006
citrix metaframe, metaframe presentation server +1 moreThe Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and...CVE-2006-58615.0 MediumNovember 10, 2006
citrix metaframe, metaframe presentation server +1 moreHeap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix...CVE-2006-58217.5 HighNovember 10, 2006
marshal mailmarshal smtpDirectory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal...CVE-2006-548710.0 HighNovember 10, 2006
immediacy .net cmsCross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2...CVE-2006-5853Public exploit6.8 MediumNovember 10, 2006
openbase international ltd openbaseUntrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users...CVE-2006-5852Public exploit4.6 MediumNovember 10, 2006
openbase international ltd openbaseopenexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink...CVE-2006-5851Public exploit2.1 LowNovember 10, 2006
essen essentia web serverStack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to...CVE-2006-5850Public exploit7.5 HighNovember 10, 2006
irayoblogPHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows...CVE-2006-5849Public exploit7.5 HighNovember 10, 2006
freewebshopCross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows...CVE-2006-5847Public exploit6.1 MediumNovember 10, 2006
freewebshopDirectory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote...CVE-2006-5846Public exploitEPSS 11.9%6.4 MediumNovember 10, 2006
speedywikiUnrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated...CVE-2006-58456.5 MediumNovember 10, 2006
speedywikiSpeedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1)...CVE-2006-58445.0 MediumNovember 10, 2006
speedywikiCross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers...CVE-2006-58436.8 MediumNovember 10, 2006
unicore clientThe keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has...CVE-2006-58422.1 LowNovember 10, 2006
dodos scripts dodosmailMultiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and...CVE-2006-5841Public exploit7.5 HighNovember 10, 2006
abarcar realty portal** DISPUTED ** Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote...CVE-2006-5840Disputed7.5 HighNovember 10, 2006
phpadventurePHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier...CVE-2006-5839Public exploit7.5 HighNovember 10, 2006
newp news publication systemPHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System...CVE-2006-5838Public exploit5.1 MediumNovember 10, 2006
simplechatStatic code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare...CVE-2006-5837Public exploit7.5 HighNovember 10, 2006
opendarwin darwin kernelThe fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in...CVE-2006-5836Public exploit7.2 HighNovember 10, 2006
ibm lotus notesThe Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7...CVE-2006-5835EPSS 13.4%5.0 MediumNovember 10, 2006
opensolution quick.cms.liteDirectory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote...CVE-2006-5834Public exploit5.0 MediumNovember 10, 2006
greenbeast cms cmsgbcms_php_files/up_loader.php GreenBeast CMS 1.3 does not require authentication to upload files,...CVE-2006-58337.5 HighNovember 10, 2006
aiocpAll In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full...CVE-2006-5832Public exploit5.0 MediumNovember 10, 2006
aiocpPHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel ...CVE-2006-5831Public exploit7.5 HighNovember 10, 2006
aiocpMultiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007...CVE-2006-5830Public exploit6.8 MediumNovember 10, 2006
aiocpMultiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier...CVE-2006-5829Public exploit6.8 MediumNovember 10, 2006
deltascripts php classifiedsSQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows...CVE-2006-5828Public exploit7.5 HighNovember 10, 2006
phpcomasyMultiple cross-site scripting (XSS) vulnerabilities in index.php in phpComasy CMS 0.7.9pre and...CVE-2006-58276.8 MediumNovember 10, 2006
texas imperial software wftpdBuffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated...CVE-2006-5826Public exploitEPSS 10.8%5.8 MediumNovember 10, 2006
kayako supportsuiteCross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows...CVE-2006-5825Public exploit4.3 MediumNovember 10, 2006
freebsdInteger overflow in the ffs_rdextattr function in FreeBSD 6.1 allows local users to cause a...CVE-2006-58244.9 MediumNovember 9, 2006
linux kernelThe zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service ...CVE-2006-58234.0 MediumNovember 9, 2006
hp openview client configuraton managerradexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication...CVE-2006-57827.8 HighNovember 9, 2006
freebsdThe libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context...CVE-2006-5680Fix available5.0 MediumNovember 9, 2006
ibm lotus dominoMultiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0...CVE-2006-58187.2 HighNovember 8, 2006
parallels desktopprl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library...CVE-2006-58172.1 LowNovember 8, 2006
dmitry sheiko business card web builderMultiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder ...CVE-2006-58167.5 HighNovember 8, 2006
proftpd project proftpdStack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote...CVE-2006-5815Public exploitFix availableEPSS 75.5%10.0 HighNovember 8, 2006
novell edirectoryUnspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code,...CVE-2006-58147.5 HighNovember 8, 2006
novell edirectoryUnspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service,...CVE-2006-58135.0 MediumNovember 8, 2006
kerio mailserverUnspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as...CVE-2006-58125.0 MediumNovember 8, 2006
openemrPHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with...CVE-2006-5811Public exploit6.8 MediumNovember 8, 2006
xoopsCross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows...CVE-2006-5810Public exploit6.8 MediumNovember 8, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open