CVEs published in December 2006
779 vulnerabilities, 90 critical, 0 exploited.
- hp tru64Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4,...7.2 High
- b2evolutionPHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5...7.5 High
- phpleague - univert phpleagueMultiple PHP remote file inclusion vulnerabilities in PhpLeague - Univert PhpLeague 0.81 allow...7.5 High
- phpadsnew** DISPUTED ** PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in...7.5 High
- dol storye storyeMultiple SQL injection vulnerabilities in dettaglio.asp in dol storye allow remote attackers to...7.5 High
- amateras snsCross-site scripting (XSS) vulnerability in Amateras sns 3.11 and earlier allows remote attackers...6.8 Medium
- madwifiStack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows...7.5 High
- linksys wip 330 wireless-g ip phonePhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a...7.8 High
- vmware workstationBuffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary...4.6 Medium
- f-secure anti-virusF-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service ...10.0 High
- kaspersky lab anti-virusKaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus...5.0 Medium
- f-prot antivirusF-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote attackers to bypass virus...5.0 Medium
- clam anti-virus clamavClam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting...5.0 Medium
- softwin bitdefender mail protectionBitDefender Mail Protection for SMB 2.0 allows remote attackers to bypass virus detection by...5.0 Medium
- mystatsmystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path...5.0 Medium
- mystatsSQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers...7.5 High
- mystatsMultiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier...6.8 Medium
- justsystem hanako, hanako viewer, ichitaro +3 more +5 moreBuffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004,...6.8 Medium
- 2x thinclientserver2X ThinClientServer Enterprise Edition before 4.0.2248 allows remote attackers to create multiple...7.5 High
- linux kernelsmbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are...4.1 Medium
- ubuntu linuxUnspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS,...4.6 Medium
- clam anti-virus clamavClam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- superfreaker studios upublisherSQL injection vulnerability in Superfreaker Studios UPublisher 1.0 allows remote attackers to...7.5 High
- superfreaker studios upublisherMultiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0 allow remote...7.5 High
- freebsd, netbsd, openbsd +2 more** DISPUTED ** Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow...4.4 Medium
- blazevideo hdtv playerStack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote...7.5 High
- ulrik petersen emdros database engine, emrdos database engine +1 moreMultiple memory leaks in Ulrik Petersen Emdros Database Engine before 1.2.0.pre231 allow local...5.0 Medium
- jonas gauffin publiceraSQL injection vulnerability in certain database classes in Jonas Gauffin Publicera 1.0-rc2 and...7.5 High
- jonas gauffin publiceraCross-site scripting (XSS) vulnerability in Jonas Gauffin Publicera 1.0-rc2 and earlier allows...6.8 Medium
- plx web studio payDirectory traversal vulnerability in index.php in plx Web Studio (aka plxWebDev) plx Pay 3.2 and...7.5 High
- open solution quick.cartMultiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when...6.8 Medium
- open solution quick.cartMultiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when...6.8 Medium
- ac4p mobileMultiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to...6.8 Medium
- link content management serverCross-site scripting (XSS) vulnerability in naprednaPretraga.php in LINK Content Management...6.8 Medium
- link content management server content management serverMultiple SQL injection vulnerabilities in LINK Content Management Server (CMS) allow remote...7.5 High
- drupal cvs management and trackerCross-site scripting (XSS) vulnerability in the CVS management/tracker 4.7.x-1.0, 4.7.x-2.0, and...6.8 Medium
- intel pro 1000 adapters, pro 1000 pcie adapters, pro 10 100 adapters +1 more +3 moreStack-based buffer overflow in Intel PRO 10/100, PRO/1000, and PRO/10GbE PCI, PCI-X, and PCIe...7.2 High
- citrix presentation server clientHeap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation...6.8 Medium
- l2tpns, debian linux +1 moreBuffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling...7.8 High
- john goodman abitwhizzyAbsolute path traversal vulnerability in abitwhizzy.php before 20061204 allows remote attackers...7.8 High
- plonePlone allows a user to masquerade as a group4.3 Medium
- positive software h-sphereThe control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's...6.8 Medium
- ultimate helpdesk helpdeskDirectory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to...7.5 High
- ultimate helpdesk helpdeskCross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote...6.8 Medium
- widcomm btsavemysqlBTSaveMySql 1.2 stores sensitive data under the web root with insufficient access control, which...7.5 High
- uploadscriptUploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access...7.5 High
- onedotoh simple file managerMultiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow...7.5 High
- simple machines smfCross-site scripting (XSS) vulnerability in display.php in Simple Machines Forum (SMF) 1.1 Final...6.8 Medium
- phpmyadminMultiple CRLF injection vulnerabilities in PhpMyAdmin 2.7.0-pl2 allow remote attackers to inject...7.5 High
- phpmyadminPhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive information via a direct request...5.0 Medium
- Show moreLoading…