CVEs published in November 2006
507 vulnerabilities, 29 critical, 0 exploited.
- sitesoutlet e-commerce kit-1Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow...7.5 High
- sphpblogMultiple directory traversal vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow...7.5 High
- sphpblogMultiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8...6.8 Medium
- gcis aspcartMultiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions (GCIS) ASPCart...7.5 High
- futuretec e-calendar proMultiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute...7.5 High
- property pro proSQL injection vulnerability in vir_Login.asp in Property Pro 1.0 allows remote attackers to...7.5 High
- anton vlasov dosepaDirectory traversal vulnerability in textview.php in Anton Vlasov DoSePa 1.0.4 allows remote...5.0 Medium
- adobe acrobat readerAdobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial...9.3 High
- realnetworks helix dna server, helix mobile server, helix server +2 moreHeap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3,...10.0 High
- qualcomm eudora worldmailQUALCOMM Eudora WorldMail 4.0 allows remote attackers to cause a denial of service, as...5.0 Medium
- qualcomm eudora worldmailMultiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have...7.5 High
- bloo** DISPUTED ** PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0...7.5 High
- bestwebapp dating siteCross-site scripting (XSS) vulnerability in login_form.asp in BestWebApp Dating Site allows...6.8 Medium
- bestwebapp dating siteSQL injection vulnerability in the login component in BestWebApp Dating Site allows remote...7.5 High
- blog torrent previewCross-site scripting (XSS) vulnerability in announce.php in Blog Torrent Preview 0.92 allows...6.8 Medium
- blooCross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php in Bill...6.8 Medium
- jim plush my-bic** DISPUTED ** PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0...7.5 High
- wordpressWordPress before 2.0.5 does not properly store a profile containing a string representation of a...4.0 Medium
- wordpresswp-admin/user-edit.php in WordPress before 2.0.5 allows remote authenticated users to read the...4.0 Medium
- apple mac os xBuffer overflow in the JavaScript implementation in Safari on Apple Mac OS X 10.4 allows remote...5.0 Medium
- netbsdThe NetBSD-current kernel before 20061028 does not properly perform bounds checking of an...7.2 High
- dragonflybsd, freebsd, midnightbsd +2 more +4 moreInteger signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers ...2.1 Low
- mginternet car site managerCross-site scripting (XSS) vulnerability in csm/asp/listings.asp in MGinternet Car Site Manager ...4.3 Medium
- sap web application serverUnspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote...5.0 Medium
- sap web application serverSAP allows remote attackers to obtain potentially sensitive information such as operating system...5.0 Medium
- sun jdk, jre +1 moreUnspecified vulnerability in the Java Runtime Environment (JRE) Swing library in JDK and JRE 5.0...5.0 Medium
- webevents online event registrationsave_profile.asp in WebEvents (Online Event Registration Template) 2.0 and earlier allows remote...5.0 Medium
- sky software fileview activex control, winzip +1 moreStack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10...9.3 High
- cactusoft cactushopMultiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to...7.5 High
- vmware virtualcenterVMWare VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1 Patch 1...4.0 Medium
- proftpd project proftpd** DISPUTED ** ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when...7.5 High
- mod auth kerb auth kerbOff-by-one error in the der_get_oid function in mod_auth_kerb 5.0 allows remote attackers to...5.0 Medium
- microsoft windows 2000Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows...5.0 Medium
- aspintranetSQL injection vulnerability in default.asp in ASPintranet, possibly 1.2, allows remote attackers...7.5 High
- extreme cms cmsadmin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication,...6.8 Medium
- extreme cms cmsMultiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and...6.8 Medium
- webhost automation helm web hosting control panelMultiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10...6.8 Medium
- directadminMultiple cross-site scripting (XSS) vulnerabilities in JBMC Software DirectAdmin 1.28.1 allow...6.0 Medium
- biba software seleniumserver ftp serverSeleniumServer FTP Server 1.0, and possibly earlier, stores user passwords in plaintext in the...10.0 High
- biba software seleniumserver ftp serverMultiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly...6.4 Medium
- renasoft netjetserveradm_lgn_admin.asp in Renasoft NetJetServer 2.5.3.939, and possibly earlier, does not properly...10.0 High
- renasoft netjetserverRenasoft NetJetServer 2.5.3.939, and possibly earlier, uses insecure permissions for Global.asa,...5.0 Medium
- e-xoopportUnspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as...10.0 High
- expinion.net multicalendarsMultiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute...7.5 High
- drumster blogmeMultiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to...7.5 High
- drumster blogmeMultiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote...6.8 Medium
- timo sirainen dovecotOff-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions,...5.0 Medium
- netkitftpd in Linux Netkit (linux-ftpd) 0.17, and possibly other versions, does not check the return...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreMultiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown...9.3 High
- netgear wg111v2, wg111v2 driver +1 moreStack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter (USB) allows...10.0 High
- Show moreLoading…