CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

• ignite realtime openfire Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in... CVE-2006-7233 4.3 MediumDecember 31, 2006
• mysql, canonical ubuntu linux +1 more sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated... CVE-2006-7232 3.5 LowDecember 31, 2006
• civica software civica SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to... CVE-2006-7231 Public exploit 7.5 HighDecember 31, 2006
• broadcom brightstor arcserve backup server Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server... CVE-2006-6917 Public exploit EPSS 30.2% 10.0 HighDecember 31, 2006
• getahead direct web remoting Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service ... CVE-2006-6916 7.5 HighDecember 31, 2006
• ibm aix ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service ... CVE-2006-6915 4.0 MediumDecember 31, 2006
• ibm aix Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain... CVE-2006-6914 5.0 MediumDecember 31, 2006
• phpmyfaq Unspecified vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to upload... CVE-2006-6913 7.5 HighDecember 31, 2006
• phpmyfaq SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute... CVE-2006-6912 Public exploit 7.5 HighDecember 31, 2006
• digitizing quote and ordering system quote and ordering system SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows... CVE-2006-6911 Public exploit 6.0 MediumDecember 31, 2006
• fersch formbankserver formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows... CVE-2006-6910 Public exploit 7.8 HighDecember 31, 2006
• karl dahlke edbrowse Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3... CVE-2006-6909 10.0 HighDecember 31, 2006
• broadcom widcomm bluetooth, microsoft windows mobile, windows embedded compact +2 more Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as... CVE-2006-6908 EPSS 30.7% 10.0 HighDecember 31, 2006
• bluesoil bluetooth bluetooth Unspecified vulnerability in the Bluesoil Bluetooth stack has unknown impact and attack vectors. CVE-2006-6907 10.0 HighDecember 31, 2006
• apple mac os x Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact... CVE-2006-6906 7.2 HighDecember 31, 2006
• broadcom widcomm bluetooth Unspecified vulnerability in the Widcomm Bluetooth stack allows remote attackers to gain... CVE-2006-6905 10.0 HighDecember 31, 2006
• broadcom bluetooth stack Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain... CVE-2006-6904 7.9 HighDecember 31, 2006
• toshiba bluetooth Unspecified vulnerability in the Toshiba Bluetooth stack allows remote attackers to gain... CVE-2006-6903 10.0 HighDecember 31, 2006
• microsoft windows 2003 server Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition... CVE-2006-6902 EPSS 14.6% 10.0 HighDecember 31, 2006
• microsoft windows 2003 server Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to... CVE-2006-6901 EPSS 14.6% 10.0 HighDecember 31, 2006
• apple mac os x Unspecified vulnerability in the Bluetooth stack in Apple Mac OS 10.4 has unknown impact and... CVE-2006-6900 10.0 HighDecember 31, 2006
• bluez project bluez hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1)... CVE-2006-6899 Public exploitFix available 5.4 MediumDecember 31, 2006
• broadcom widcomm bluetooth Widcomm Bluetooth for Windows (BTW) before 4.0.1.1500 allows remote attackers to listen to and... CVE-2006-6898 7.8 HighDecember 31, 2006
• widcomm bluetooth for windows Directory traversal vulnerability in Widcomm Bluetooth for Windows (BTW) 3.0.1.905 allows remote... CVE-2006-6897 5.4 MediumDecember 31, 2006
• plantronic headset The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode,... CVE-2006-6896 5.4 MediumDecember 31, 2006
• sony ericsson t60 The Bluetooth stack in the Sony Ericsson T60 does not properly implement "Limited discoverable"... CVE-2006-6895 2.9 LowDecember 31, 2006
• spine Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown impact and attack vectors,... CVE-2006-6894 10.0 HighDecember 31, 2006
• tor Tor allows remote attackers to discover the IP address of a hidden service by accessing this... CVE-2006-6893 5.0 MediumDecember 31, 2006
• jonathon freeman ovbb Cross-site scripting (XSS) vulnerability in the GetLocation function in online.php in Jonathon J.... CVE-2006-6892 6.8 MediumDecember 31, 2006
• vz forum forum Vz (Adp) Forum 2.0.3 stores sensitive information under the web root with insufficient access... CVE-2006-6891 Public exploit 5.0 MediumDecember 31, 2006
• voc-project voodoo chat Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access... CVE-2006-6890 Public exploit 7.5 HighDecember 31, 2006
• freestyle wiki FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with... CVE-2006-6889 Public exploit 7.5 HighDecember 31, 2006
• p-news P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access... CVE-2006-6888 Public exploit 5.0 MediumDecember 31, 2006
• logahead unu Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and... CVE-2006-6887 Public exploit 6.8 MediumDecember 31, 2006
• phpwcms phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request... CVE-2006-6886 5.0 MediumDecember 31, 2006
• macromedia shockwave An ActiveX control in SwDir.dll in Macromedia Shockwave 10 allows remote attackers to cause a... CVE-2006-6885 Public exploit 4.3 MediumDecember 31, 2006
• winzip Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView"... CVE-2006-6884 Public exploit 9.3 HighDecember 31, 2006
• phpirc bot bot ** DISPUTED ** PHP remote file inclusion vulnerability in php4you.php in PHPIrc_bot 0.2 allows... CVE-2006-6883 Disputed 7.5 HighDecember 31, 2006
• golden book book Cross-site scripting (XSS) vulnerability in golden book allows remote attackers to inject... CVE-2006-6882 4.3 MediumDecember 31, 2006
• stavros markou atmelwlandriver Buffer overflow in the Get_Wep function in cofvnet.c for ATMEL Linux PCI PCMCIA USB Drivers... CVE-2006-6881 7.5 HighDecember 31, 2006
• php-update Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow... CVE-2006-6880 Public exploit 7.5 HighDecember 31, 2006
• php-update Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows... CVE-2006-6879 Public exploit 6.0 MediumDecember 31, 2006
• php-update admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by... CVE-2006-6878 Public exploit 7.5 HighDecember 31, 2006
• matteo lucarelli 3editor cms Directory traversal vulnerability in index.php in Matteo Lucarelli 3editor CMS 0.42 and earlier,... CVE-2006-6877 Public exploit 6.8 MediumDecember 31, 2006
• openser Buffer overflow in the fetchsms function in the SMS handling module (libsms_getsms.c) in OpenSER... CVE-2006-6876 7.5 HighDecember 31, 2006
• openser, openser osp module +1 more Buffer overflow in the validateospheader function in the Open Settlement Protocol (OSP) module in... CVE-2006-6875 7.5 HighDecember 31, 2006
• endonesia Multiple cross-site scripting (XSS) vulnerabilities in friend.php in eNdonesia 8.4 allow remote... CVE-2006-6874 6.8 MediumDecember 31, 2006
• endonesia Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to... CVE-2006-6873 Public exploit 7.5 HighDecember 31, 2006
• endonesia Directory traversal vulnerability in mod.php in eNdonesia 8.4 allows remote attackers to read... CVE-2006-6872 Public exploit 5.0 MediumDecember 31, 2006
• endonesia Multiple cross-site scripting (XSS) vulnerabilities in eNdonesia 8.4 allow remote attackers to... CVE-2006-6871 Public exploit 6.8 MediumDecember 31, 2006
• Show olderLoading…