CVEs published in December 2006
779 vulnerabilities, 90 critical, 0 exploited.
- alterncCross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php in AlternC 0.9...6.8 Medium
- nukeaiDirect static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP...7.5 High
- cahier de textes de textesadministration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed...4.3 Medium
- cahier de textes de textesCahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient...5.0 Medium
- microsoft windows live messengerMicrosoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows...4.3 Medium
- vuplayerStack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute...7.5 High
- songbird media playerFormat string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to...7.8 High
- chama cargo cargoCross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers...6.8 Medium
- gphotosindex.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid...7.8 High
- uapplication uphotogalleryMultiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers...7.5 High
- photo organizer organizerPhoto Organizer 2.32b and earlier does not properly check the ownership of certain objects, which...7.5 High
- photo organizer organizerMultiple SQL injection vulnerabilities in Photo Organizer (PO) 2.32b and earlier allow remote...7.5 High
- coalescent systems freepbxCoalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers...7.5 High
- fipsasp fipsshopMultiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute...7.5 High
- casio photo loader, newtone imagekit +1 moreMultiple buffer overflows in the ActiveX controls in Newtone ImageKit 5 before Fix 30 and 6...10.0 High
- s9y serendipityMultiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote...6.8 Medium
- telnet ftp server ftp serverSorin Chitu Telnet-FTP Server 1.0 allows remote authenticated users to cause a denial of service ...4.0 Medium
- telnet ftp server ftp serverDirectory traversal vulnerability in Sorin Chitu Telnet-FTP Server 1.0 allows remote...4.0 Medium
- mailenable netwebadmin professional, netwebadmin enterprise +1 morewebadmin in MailEnable NetWebAdmin Professional 2.32 and Enterprise 2.32 allows remote attackers...7.5 High
- apple safariThe AutoFill feature in Apple Safari 2.0.4 does not properly verify that all automatically...5.0 Medium
- woltlab burning board liteSQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board...7.5 High
- adobe acrobat readerAdobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial...9.3 High
- kde kofficeInteger overflow in the KPresenter import filter for Microsoft PowerPoint files (filters...6.8 Medium
- novell netware clientMultiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91...7.5 High
- francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other...7.5 High
- postnuke software foundation postnukeSQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows...7.5 High
- dreamcost dreamaccountPHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote...7.5 High
- vubbvuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct...5.0 Medium
- vubbSQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute...7.5 High
- codewalkers ltwcalendarCodewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might...5.0 Medium
- codewalkers ltwcalendarCross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar)...6.8 Medium
- neoengineThe Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and earlier, and CVS 3422,...5.0 Medium
- neoengineMultiple format string vulnerabilities in NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote...7.5 High
- geeklogMultiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to...5.1 Medium
- puntalPHP remote file inclusion vulnerability in the installation scripts in Puntal before 1.8.5 allows...7.5 High
- google search appliance, mini search appliance +1 moreCross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote...4.3 Medium
- twikiTWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and ...9.0 High
- linux kernelInteger overflow in the get_fdb_entries function in net/bridge/br_ioctl.c in the Linux kernel...7.2 High
- recipes complete website complete websiteMultiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow...6.8 Medium
- dev4u cmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in dev4u CMS allow remote...6.8 Medium
- dev4u cmsMultiple SQL injection vulnerabilities in index.php in dev4u CMS allow remote attackers to...7.5 High
- php-nuke mermaid modulePHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke...7.5 High
- nivisec hacks listSQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier...7.5 High
- wallpaper complete websiteMultiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09...7.5 High
- wallpaper complete websiteSQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1...7.5 High
- pegamesindex.php in PEGames uses the extract function to overwrite critical variables, which allows...7.5 High
- webwiz site newsPHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly...7.5 High
- birdblogMultiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to...6.8 Medium
- iisworks asp listpicsSQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to...7.5 High
- midicart software asp plus shopping cart, asp shopping cart +1 moreMultiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart...7.5 High
- Show moreLoading…