Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
November

CVEs published in November 2006

507 vulnerabilities, 29 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

james greenwood monkey boardsMonkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests...CVE-2006-61135.0 MediumNovember 28, 2006
qbik wingateQbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU...CVE-2006-45185.0 MediumNovember 28, 2006
philippe jounin tftpd32Buffer overflow in Tftpd32 3.01 allows remote attackers to cause a denial of service via a long...CVE-2006-61415.0 MediumNovember 28, 2006
sisfo kampus kampusPHP remote file inclusion vulnerability in Sisfo Kampus 2006 (Semarang 3) allows remote attackers...CVE-2006-6140Public exploit7.5 HighNovember 28, 2006
sisfo kampus kampusDirectory traversal vulnerability in downloadexcel.php in Sisfo Kampus 2006 (Semarang 3) allows...CVE-2006-61395.0 MediumNovember 28, 2006
sisfo kampus kampusDirectory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to...CVE-2006-6138Public exploit5.0 MediumNovember 28, 2006
sisfo kampus kampusMultiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to...CVE-2006-6137Public exploit7.5 HighNovember 28, 2006
ibm websphere application serverIBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4...CVE-2006-613610.0 HighNovember 28, 2006
ibm websphere application serverMultiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 ...CVE-2006-613510.0 HighNovember 28, 2006
gnu radiusFormat string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU...CVE-2006-418110.0 HighNovember 28, 2006
microsoft windows media playerHeap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows...CVE-2006-6134EPSS 44.1%7.5 HighNovember 28, 2006
businessobjects crystal reports xi, microsoft visual studio .net +1 moreStack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET...CVE-2006-6133Public exploitEPSS 54.0%7.6 HighNovember 28, 2006
softacid link exchange liteMultiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute...CVE-2006-61327.5 HighNovember 28, 2006
kerio webstarUntrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D...CVE-2006-6131Public exploit6.2 MediumNovember 28, 2006
apple mac os xApple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by...CVE-2006-6130Public exploit4.9 MediumNovember 28, 2006
remlab web mech designerREMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via...CVE-2006-58965.0 MediumNovember 27, 2006
jboss application serverDirectory traversal vulnerability in the DeploymentFileRepository class in JBoss Application...CVE-2006-5750Fix availableEPSS 14.7%7.5 HighNovember 27, 2006
apple mac os x, mac os x server +1 moreInteger overflow in the fatfile_getarch2 in Apple Mac OS X allows local users to cause a denial...CVE-2006-6129Public exploit4.6 MediumNovember 27, 2006
linux kernelThe ReiserFS functionality in Linux kernel 2.6.18, and possibly other versions, allows local...CVE-2006-61282.1 LowNovember 27, 2006
apple mac os x, mac os x server +1 moreApple Mac OS X kernel allows local users to cause a denial of service via a process that uses...CVE-2006-61272.1 LowNovember 27, 2006
apple mac os x, mac os x server +1 moreApple Mac OS X allows local users to cause a denial of service (memory corruption) via a crafted...CVE-2006-61262.1 LowNovember 27, 2006
netgear wg311v1Heap-based buffer overflow in the wireless driver (WG311ND5.SYS) 2.3.1.10 for NetGear WG311v1...CVE-2006-6125Public exploitEPSS 14.3%7.5 HighNovember 27, 2006
biba software seleniumserver web serverCross-site scripting (XSS) vulnerability in SeleniumServer Web Server 1.0 allows remote attackers...CVE-2006-6124Public exploit6.8 MediumNovember 26, 2006
coppermine photo galleryCoppermine Photo Gallery (CPG) 1.4.8 stable, with register_globals enabled, allows remote...CVE-2006-61232.6 LowNovember 26, 2006
tinMultiple buffer overflows in TIN before 1.8.2 have unspecified impact and attack vectors, a...CVE-2006-6122Fix available7.5 HighNovember 26, 2006
acer lunchapp.aplunchAcer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary...CVE-2006-6121Public exploitEPSS 12.9%9.3 HighNovember 26, 2006
passgo sso plusPassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions (Everyone/Full...CVE-2006-59654.6 MediumNovember 26, 2006
mmgallerymmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for...CVE-2006-61195.0 MediumNovember 26, 2006
mmgalleryCross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers...CVE-2006-6118Public exploit6.8 MediumNovember 26, 2006
fipsasp fipsgallerySQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers...CVE-2006-6117Public exploit7.5 HighNovember 26, 2006
fipsasp fipsforumSQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers...CVE-2006-6116Public exploit7.5 HighNovember 26, 2006
fipsasp fipscmsSQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to...CVE-2006-6115Public exploit7.5 HighNovember 26, 2006
alan ward a-cartMultiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to...CVE-2006-6111Public exploit7.5 HighNovember 26, 2006
bpg-infotech content management systemMultiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System...CVE-2006-61107.5 HighNovember 26, 2006
candypress storeMultiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to...CVE-2006-6109Public exploit7.5 HighNovember 26, 2006
ec-cubeCross-site scripting (XSS) vulnerability in EC-CUBE before 1.0.1a-beta allows remote attackers to...CVE-2006-61084.3 MediumNovember 26, 2006
pstotextpstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell...CVE-2006-5869Fix available5.1 MediumNovember 26, 2006
gnu tarGNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite...CVE-2006-6097Public exploitFix availableEPSS 11.7%4.0 MediumNovember 24, 2006
dotnetindex active news managerCross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows...CVE-2006-6096Public exploit4.3 MediumNovember 24, 2006
dotnetindex active news managerMultiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute...CVE-2006-6095Public exploit7.5 HighNovember 24, 2006
dotnetindex active news managerMultiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute...CVE-2006-6094Public exploit7.5 HighNovember 24, 2006
picturespro photo cartMultiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3...CVE-2006-6093Public exploit7.5 HighNovember 24, 2006
20 20 applications 20 auto galleryMultiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote...CVE-2006-6092Public exploit7.5 HighNovember 24, 2006
grimbbCross-site scripting (XSS) vulnerability in Grim Pirate GrimBB before 2006_11_21 allows remote...CVE-2006-60914.3 MediumNovember 24, 2006
baalasp smart form portalMultiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute...CVE-2006-60907.5 HighNovember 24, 2006
baalasp forumMultiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote...CVE-2006-60894.3 MediumNovember 24, 2006
blue-collar productions i-galleryMultiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote...CVE-2006-6088Public exploit4.3 MediumNovember 24, 2006
my little homepage little weblogCross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote...CVE-2006-6087Public exploit4.3 MediumNovember 24, 2006
e-arkPHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers...CVE-2006-6086Public exploit5.1 MediumNovember 24, 2006
kileKile before 1.9.3 does not assign a backup file the same permissions as the original file, which...CVE-2006-6085Fix available5.0 MediumNovember 24, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open