CVEs published in December 2006
779 vulnerabilities, 90 critical, 0 exploited.
- atmail webmailCross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote...6.8 Medium
- atmail webmailCross-site request forgery (CSRF) vulnerability in util.pl in @Mail WebMail 4.51, and util.php in...7.5 High
- calacode atmail webmail systemCross-site scripting (XSS) vulnerability in @Mail WebMail allows remote attackers to inject...6.8 Medium
- oracle application server portalMultiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow...5.0 Medium
- gnome gconfThe GConf daemon (gconfd) in GConf 2.14.0 creates temporary files under directories with names...1.9 Low
- oracle application server portalCRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier,...7.5 High
- microsoft windows 2000, windows 2003 server, windows vista +1 more +3 moreDouble free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to...6.9 Medium
- carsen klock textsendMultiple cross-site scripting (XSS) vulnerabilities in index.php in Carsen Klock TextSend 1.5...6.8 Medium
- scriptsfrenzy.com e-uploader proDirectory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows...7.5 High
- zabbixMultiple buffer overflows in zabbix before 20061006 allow attackers to cause a denial of service ...7.5 High
- zabbixMultiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a...7.5 High
- valdersoft shopping cartMultiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier...7.5 High
- typo3rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the...7.5 High
- paristemiMultiple PHP remote file inclusion vulnerabilities in Paristemi 0.8.3 and earlier allow remote...7.5 High
- web-app.net webappWeb Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET)...7.5 High
- web-app.net webappCross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9...4.3 Medium
- textsendPHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote...6.8 Medium
- pedro lineu orso chetcpasswdHeap-based buffer overflow in Pedro Lineu Orso chetcpasswd 2.3.3 allows local users to cause a...7.2 High
- pedro lineu orso chetcpasswdHeap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to...7.5 High
- pedro lineu orso chetcpasswdPedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code...7.8 High
- chetcpasswd project chetcpasswdPedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid...5.0 Medium
- chetcpasswdPedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might...7.5 High
- chetcpasswdPedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc...4.6 Medium
- chetcpasswd project chetcpasswdPedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying...7.5 High
- mono xspThe System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly...5.0 Medium
- netrikThe edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify...7.5 High
- eset software nod32 antivirusESET NOD32 Antivirus before 1.1743 allows remote attackers to cause a denial of service (crash)...2.6 Low
- eset software nod32 antivirusInteger overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743...9.3 High
- novell netware, apache http server +1 moreCross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell...6.8 Medium
- ozeki http-sms gatewayOzeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in...2.1 Low
- winftp server serverWinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long (1)...5.0 Medium
- maxiasp burak yilmaz download portalMultiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to...7.5 High
- maxiasp burak yilmaz download portalSQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers...7.5 High
- nortel callpilot serverUnspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors,...10.0 High
- webcalendarCross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier...6.8 Medium
- verliadminCross-site scripting (XSS) vulnerability in VerliAdmin 0.3 and earlier allows remote attackers to...6.8 Medium
- verliadminMultiple SQL injection vulnerabilities in VerliAdmin 0.3 and earlier allow remote attackers to...7.5 High
- verliadminPHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote...7.5 High
- astonsoft deepburnerBuffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted...6.8 Medium
- marathon aleph one aleph oneFormat string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote...5.0 Medium
- marathon aleph one aleph oneThe server component in Marathon Aleph One before 0.17.1 and 2006-12-17 allows remote attackers...5.0 Medium
- suse linux enterprise desktop, linux, open enterprise server +2 moreUnspecified vulnerability in Linux User Management (novell-lum) on SUSE Linux Enterprise Desktop...4.1 Medium
- php-updateVariable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote...7.5 High
- kde libkhtmlThe nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other...4.3 Medium
- microsoft ie, outlook, windows xp +2 moreThe Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows...5.0 Medium
- inktomi searchInktomi Search 4.1.4 allows remote attackers to obtain sensitive information via direct requests...5.0 Medium
- netbsdThe if_clone_list function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before...2.1 Low
- netbsdUnspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1...2.1 Low
- netbsdThe procfs implementation in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024...1.7 Low
- netbsdThe sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and...4.3 Medium
- Show moreLoading…