CVEs published in November 2006
507 vulnerabilities, 29 critical, 0 exploited.
- unverse.net abitwhizzyDirectory traversal vulnerability in abitwhizzy.php in aBitWhizzy allows remote attackers to read...5.0 Medium
- creascripts creadirectorySQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to...7.5 High
- creascripts creadirectoryMultiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote...4.3 Medium
- telaenPHP remote file inclusion vulnerability in Smarty_Compiler.class.php in Telaen 1.1.0 and earlier...7.5 High
- gazatem technologies gnews publisherMultiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote...7.5 High
- imendio ab loudmouthMultiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to...7.5 High
- a-conmanPHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote...7.5 High
- mozilla firefox, netscape navigator +1 moreThe (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard...5.0 Medium
- broadcom brightstor arcserve backup, ca brightstor arcserve backup agent +1 moreBuffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor...10.0 High
- baalasp smart form portalCross-site scripting (XSS) vulnerability in addpost1.asp in BaalAsp forum allows remote attackers...6.8 Medium
- enthrallweb eshopping cartMultiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to...7.5 High
- enthrallweb eshopping cartMultiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to...7.5 High
- bpg-infotech easy publisher, smart publisher pro +1 moreSQL injection vulnerability in bpg/publications_list.asp in BPG-InfoTech Easy Publisher and Smart...7.5 High
- my firewall plus firewall plusMy Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching...7.2 High
- asp-nukeSQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier...7.5 High
- malbumindex.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via...5.0 Medium
- malbumDirectory traversal vulnerability in the cached_album function in functions.php for mAlbum 0.3...2.6 Low
- 20 20 applications 20 datashedMultiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow...7.5 High
- dragon internet events listingMultiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote...7.5 High
- mxbb calsnails modulePHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for...5.1 Medium
- fuzzball muck muckMultiple buffer overflows in the Message Parsing Interpreter (MPI) in Fuzzball MUCK before 6.07...7.5 High
- un4seen xmplayStack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to...7.5 High
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote...5.1 Medium
- apple mac os x, mac os x server +1 morecom.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows...9.3 High
- linux kernelThe NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows...4.9 Medium
- netgear ma521 driverBuffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows...10.0 High
- linux kernelThe minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local...4.0 Medium
- linux kernelThe Linux kernel 2.6.x up to 2.6.18, and possibly other versions, on Fedora Core 6 and possibly...4.9 Medium
- linux kernelLinux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled,...4.9 Medium
- d-link dwl-g132Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows...10.0 High
- linux kernelThe ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service ...4.0 Medium
- linux kernelThe ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service...4.9 Medium
- netepi case manager case managerNetEpi Case Manager before 0.98 generates different error messages depending on whether or not a...5.0 Medium
- mamboxchange mosreporterPHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter (com_reporter)...7.5 High
- clicktech texas rankemMultiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to...7.5 High
- phil taylor shambo2PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com_shambo2) component for...7.5 High
- etomiteSQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic_quotes_gpc is...6.8 Medium
- etomiteDirectory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote...5.8 Medium
- epic designs eggblogMultiple cross-site scripting (XSS) vulnerabilities in eggblog 3.1.0 allow remote attackers to...6.8 Medium
- comdev one admin proMultiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote...6.8 Medium
- phpquickgalleryPHP remote file inclusion vulnerability in gallery_top.inc.php in PHPQuickGallery 1.9 and earlier...6.8 Medium
- oliverPHP file inclusion vulnerability in loginform-inc.php in Oliver (formerly Webshare) 1.2.2 and...6.8 Medium
- phpwebthingsPHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier,...6.8 Medium
- laurent van den reysen work system e-commerceMultiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e...7.5 High
- jelsoft vbulletinMultiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6...6.8 Medium
- powie php matchmakerSQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows...7.5 High
- powie pforumSQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier...7.5 High
- leinir travelsized cmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in Dan Jensen Travelsized CMS 0...6.8 Medium
- emreturk openhumanSQL injection vulnerability in OpenHuman before 1.0 allows remote attackers to execute arbitrary...7.5 High
- f-art agency blog cmsCross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote...6.8 Medium
- Show moreLoading…