CVEs published in December 2006
779 vulnerabilities, 90 critical, 0 exploited.
- gizzarPHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote...7.5 High
- ezhrs hr assistSQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote...7.5 High
- ezhrs hr assistSQL injection vulnerability in vdateUsr.asp in EzHRS HR Assist 1.05 and earlier allows remote...7.5 High
- cpanelCross-site scripting (XSS) vulnerability in mail/manage.html in BoxTrapper in cPanel 11 allows...6.8 Medium
- wikitimescale twozeroMultiple cross-site scripting (XSS) vulnerabilities in WikiTimeScale TwoZero before 2.31 allow...6.8 Medium
- scriptphp messageriescripthpSQL injection vulnerability in lire-avis.php in Messageriescripthp 2.0 allows remote attackers to...7.5 High
- scriptphp messageriescripthpMultiple cross-site scripting (XSS) vulnerabilities in Messageriescripthp 2.0 allow remote...6.8 Medium
- scriptphp pronewsSQL injection vulnerability in lire-avis.php in ProNews 1.5 allows remote attackers to execute...7.5 High
- scriptphp pronewsMultiple cross-site scripting (XSS) vulnerabilities in ProNews 1.5 allow remote attackers to...6.8 Medium
- kdpicsMultiple cross-site scripting (XSS) vulnerabilities in KDPics 1.16 and earlier allow remote...6.8 Medium
- kdpicsMultiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote...7.5 High
- mantisMantis before 1.1.0a2 sets the default value of $g_bug_reminder_threshold to "reporter" instead...10.0 High
- flippet.org winamp web interfaceWinamp Web Interface (Wawi) 7.5.13 and earlier uses an insufficient comparison to determine...3.5 Low
- flippet.org winamp web interfaceThe CControl::Download function (/dl URI) in Winamp Web Interface (Wawi) 7.5.13 and earlier...3.5 Low
- flippet.org winamp web interfaceDirectory traversal vulnerability in the Browse function (/browse URI) in Winamp Web Interface ...3.5 Low
- dadaimcdadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess...6.8 Medium
- sitekioskAn unspecified ActiveX control in SiteKiosk before 6.5.150 is installed "safe for scripting",...1.7 Low
- sitekioskCross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150...4.1 Medium
- phpbb group phpbbCross-site request forgery (CSRF) vulnerability in phpBB 2.0.21 allows remote authenticated users...6.0 Medium
- d-busUnspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2...1.7 Low
- ubuntu linuxUbuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource...4.6 Medium
- broadcom internet security suite, etrust antivirus +1 moreThe (1) VetMONNT.sys and (2) VetFDDNT.sys drivers in CA Anti-Virus 2007 8.1, Anti-Virus for Vista...6.6 Medium
- sun solaris, sunos +1 moreStack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute...6.6 Medium
- sun solaris, sunos +1 moreDirectory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to...6.6 Medium
- microsoft windows xp, windows 2003 server +1 moreThe Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local...7.2 High
- microsoft windows 2000The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that...7.5 High
- microsoft windows media player, windows xp, windows 2003 server +2 moreBuffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4...6.8 Medium
- microsoft outlook expressUnspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to...6.8 Medium
- openldapBuffer overflow in the krbv4_ldap_auth function in servers/slapd/kerberos.c in OpenLDAP 2.4.3 and...5.1 Medium
- enemies of carlotta of carlottaeoc.py in Enemies of Carlotta (EoC) before 1.2.4 allows remote attackers to execute arbitrary...6.8 Medium
- easypageSQL injection vulnerability in EasyPage allows remote attackers to execute arbitrary SQL commands...7.5 High
- shopsiteMultiple cross-site scripting (XSS) vulnerabilities in ShopSite 8.1 and earlier allow remote...6.8 Medium
- mailenable enterprise, professional +1 moreThe IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34,...5.0 Medium
- adobe coldfusionAdobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against...2.6 Low
- adobe coldfusionAdobe ColdFusion MX7 allows remote attackers to obtain sensitive information via a URL request (1...5.0 Medium
- sophos anti-virusMultiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers...10.0 High
- microsoft windows 2003 serverBuffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server...10.0 High
- microsoft internet explorerUnspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using...9.3 High
- microsoft ieMicrosoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet...2.6 Low
- microsoft ieMicrosoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information...4.3 Medium
- mailenable enterprise, professional +1 moreStack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise...10.0 High
- clam anti-virus clamavClam AntiVirus (ClamAV) 0.88.6 allows remote attackers to cause a denial of service (stack...5.0 Medium
- scriptphp annoncescripthpadmin/admin_membre/fiche_membre.php in AnnonceScriptHP 2.0 allows remote attackers to obtain...5.0 Medium
- scriptphp annoncescripthpMultiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers...6.8 Medium
- scriptphp annoncescripthpMultiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute...7.5 High
- xerox workcentreMultiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000,...10.0 High
- xerox workcentreThe httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13...10.0 High
- xerox workcentreXerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...10.0 High
- xerox workcentreThe SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03...10.0 High
- Show moreLoading…