CVEs published in November 2006
507 vulnerabilities, 29 critical, 0 exploited.
- apple remote desktopApple Remote Desktop before 3.1 uses insecure permissions for certain built-in packages, which...7.2 High
- verity ultraseekAbsolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2...5.0 Medium
- verity ultraseekVerity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct...5.0 Medium
- verity ultraseekVerity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks...10.0 High
- fvwmCRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows...4.6 Medium
- greg roelofs libpngThe sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12...2.6 Low
- alt-n mdaemonMDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon...4.6 Medium
- panda activescanRace condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote...5.1 Medium
- panda activescanPanda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1)...6.4 Medium
- hpecs shopping cart shopping cartMultiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute...7.5 High
- pegasus mercury mail transport systemBuffer overflow in Mercury Mail Transport System 4.01b for Windows has unknown impact and attack...7.5 High
- web inhabit a\+ store e-commerceMultiple cross-site scripting (XSS) vulnerabilities in account_login.asp in A+ Store E-Commerce...6.8 Medium
- web inhabit a\+ store e-commerceSQL injection vulnerability in browse.asp in A+ Store E-Commerce allows remote attackers to...7.5 High
- infinicartMultiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to...6.8 Medium
- infinicart** DISPUTED ** Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to...7.5 High
- xlinesoft phprunnerXLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames,...2.1 Low
- 20 20 applications 20 datashedSQL injection vulnerability in listings.asp in 20/20 DataShed (aka Real Estate Listing System)...7.5 High
- netviosSQL injection vulnerability in page.asp in NetVIOS 2.0 and earlier allows remote attackers to...7.5 High
- lynx internet solutions evolve merchantSQL injection vulnerability in viewcart.asp in Evolve shopping cart (aka Evolve Merchant) allows...7.5 High
- asp smiley smileySQL injection vulnerability in admin/default.asp in ASP Smiley 1.0 allows remote attackers to...7.5 High
- exophpdeskPHP remote file inclusion vulnerability in pipe.php in Exophpdesk 1.2 allows remote attackers to...7.5 High
- altools alftp ftp serverUnspecified vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier, allows...5.0 Medium
- altools alftp ftp serverDirectory traversal vulnerability in ALTools ALFTP FTP Server 4.1 beta 1, and possibly earlier,...5.0 Medium
- ringsworld phppeanutsPHP remote file inclusion vulnerability in pntUnit/Inspect.php in phpPeanuts 1.1 and earlier...7.5 High
- conxint ftp serverMultiple directory traversal vulnerabilities in Conxint FTP Server 2.2.0603, and possibly earlier...5.0 Medium
- funkyasp glossarySQL injection vulnerability in demo/glossary/glossary.asp in FunkyASP Glossary 1.0 allows remote...7.5 High
- mginternet car site managerMultiple SQL injection vulnerabilities in MGinternet Car Site Manager (CSM) allow remote...7.5 High
- mginternet car site managerCross-site scripting (XSS) vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager ...6.8 Medium
- website designs for less inventory managerMultiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for...7.5 High
- website designs for less inventory managerCross-site scripting (XSS) vulnerability in inventory/display/display_results.asp in Website...6.8 Medium
- grisoft avg antivirusUnspecified vulnerability in Grisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote...10.0 High
- grisoft avg antivirusGrisoft AVG Anti-Virus before 7.1.407 allows remote attackers to cause a denial of service (crash...7.8 High
- grisoft avg antivirusGrisoft AVG Anti-Virus before 7.1.407 has unknown impact and remote attack vectors involving an...10.0 High
- grisoft avg antivirusMultiple integer overflows in Grisoft AVG Anti-Virus before 7.1.407 allow remote attackers to...7.5 High
- sitexpress e-commerce systemSQL injection vulnerability in dept.asp in SiteXpress E-Commerce System allows remote attackers...7.5 High
- shopsystemsSQL injection vulnerability in index.php in ShopSystems 4.0 and earlier allows remote attackers...7.5 High
- iexpress estate agent managerSQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows...7.5 High
- ultrasiteSQL injection vulnerability in update.asp in UltraSite 1.0 allows remote attackers to execute...7.5 High
- kahuaKahua before 0.7, when running multiple applications under a single supervisor, grants...7.5 High
- aigaionMultiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management...5.1 Medium
- aigaionMultiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management...7.5 High
- phpjobschedulerPHP remote file inclusion vulnerability in firepjs.php in Phpjobscheduler 3.0 allows remote...7.5 High
- phpjobschedulerMultiple PHP remote file inclusion vulnerabilities in Phpjobscheduler 3.0 allow remote attackers...7.5 High
- asp scripter easy portal, live support +1 moreSQL injection vulnerability in cpLogin.asp in ASP Scripter Easy Portal 1.4 and Live Support 1.3...7.5 High
- vallheruMultiple SQL injection vulnerabilities in mail.php in Vallheru before 1.0.7 allow remote...7.5 High
- elinks, links +1 moreLinks web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to...7.5 High
- efficientip ipmanagerCross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows...5.8 Medium
- chris mac gimescripts shopping catalogPHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts...7.5 High
- wheatblogindex.php in Wheatblog (wB) allows remote attackers to obtain sensitive information via certain...5.0 Medium
- wheatblogMultiple cross-site scripting (XSS) vulnerabilities in add_comment.php in Wheatblog (wB) allow...5.8 Medium
- Show moreLoading…