Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2006

47 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-4704
    41Plan

    Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Micros

    MediumCVSS 6.8WeaponizedEPSS 45%

    microsoft · visual studio .netNov 1, 2006

  • CVE-2006-5645
    25Monitor

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11, when "Enabled sca

    MediumCVSS 5.0Proof of conceptEPSS 17%

    sophos · anti-virusNov 1, 2006

  • CVE-2006-5646
    25Monitor

    Heap-based buffer overflow in Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms

    MediumCVSS 5.0Proof of conceptEPSS 17%

    sophos · anti-virusNov 1, 2006

  • CVE-2006-5647
    31Monitor

    Sophos Anti-Virus and Endpoint Security before 6.0.5, Anti-Virus for Linux before 5.0.10, and other platforms before 4.11 allows remote atta

    MediumCVSS 6.4Proof of conceptEPSS 21%

    sophos · anti-virusNov 1, 2006

  • CVE-2006-5465
    33Monitor

    Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2

    HighCVSS 7.5No exploitEPSS 10%

    php · phpNov 3, 2006

  • CVE-2006-5702
    40Plan

    Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1)

    MediumCVSS 5.0WeaponizedEPSS 53%

    tiki · tikiwiki cms\/groupwareNov 3, 2006

  • CVE-2006-5710
    36Monitor

    The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, all

    HighCVSS 7.5Proof of conceptEPSS 19%

    apple · mac os xNov 3, 2006

  • CVE-2006-5735
    34Monitor

    Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbi

    HighCVSS 7.5No exploitEPSS 14%

    punbb · punbbNov 6, 2006

  • CVE-2006-5745
    53Plan

    Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on

    HighCVSS 7.6WeaponizedEPSS 77%

    microsoft · xml core servicesNov 6, 2006

  • CVE-2006-5768
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled, allow remote attacke

    HighCVSS 7.5Proof of conceptEPSS 15%

    cyberfolio · cyberfolioNov 6, 2006

  • CVE-2006-5779
    53Plan

    OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, w

    HighCVSS 7.5No exploitEPSS 76%

    openldap · openldapNov 7, 2006

  • CVE-2006-5780
    49Plan

    Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP pac

    HighCVSS 7.5WeaponizedEPSS 63%

    xlink technology · omni-nfs serverNov 7, 2006

  • CVE-2006-5650
    50Plan

    The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via t

    HighCVSS 7.5WeaponizedEPSS 67%

    aol · icqNov 7, 2006

  • CVE-2006-5792
    48Plan

    Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified vectors, as demonst

    HighCVSS 7.5WeaponizedEPSS 60%

    xlink technology · omni-nfs x enterpriseNov 7, 2006

  • CVE-2006-5815
    63This week

    Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause

    CriticalCVSS 10.0WeaponizedEPSS 75%

    proftpd project · proftpdNov 8, 2006

  • CVE-2006-5826
    26Monitor

    Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitrary code or cause a

    MediumCVSS 5.8Proof of conceptEPSS 10%

    texas imperial software · wftpdNov 9, 2006

  • CVE-2006-5835
    24Monitor

    The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authenticat

    MediumCVSS 5.0No exploitEPSS 13%

    ibm · lotus notesNov 9, 2006

  • CVE-2006-5846
    29Monitor

    Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files

    MediumCVSS 6.4Proof of conceptEPSS 11%

    freewebshop · freewebshopNov 9, 2006

  • CVE-2006-5864
    25Monitor

    Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attacke

    MediumCVSS 5.1Proof of conceptEPSS 16%

    gnu · gvNov 10, 2006

  • CVE-2006-5882
    37Monitor

    Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebo

    HighCVSS 8.3Proof of conceptEPSS 13%

    linksys · wpc300n wireless-n notebook adapter driverNov 14, 2006

  • CVE-2006-3445
    43Plan

    Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up

    HighCVSS 7.5No exploitEPSS 42%

    microsoft · windows 2000Nov 14, 2006

  • CVE-2006-4687
    28Monitor

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV t

    MediumCVSS 5.1No exploitEPSS 26%

    microsoft · ieNov 14, 2006

  • CVE-2006-4691
    64This week

    Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and X

    CriticalCVSS 10.0WeaponizedEPSS 79%

    microsoft · windows 2000Nov 14, 2006

  • CVE-2006-5198
    40Plan

    The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote

    MediumCVSS 4.0WeaponizedEPSS 62%

    winzip · winzipNov 14, 2006

  • CVE-2006-4688
    53Plan

    Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attacker

    HighCVSS 7.5WeaponizedEPSS 75%

    microsoft · windows 2000Nov 14, 2006

  • CVE-2006-4689
    30Monitor

    Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up

    MediumCVSS 5.0No exploitEPSS 34%

    microsoft · windows 2000Nov 14, 2006

  • CVE-2006-5972
    46Plan

    Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter (USB) allows remote attackers to execute arbitrary code via a

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    netgear · wg111v2 driverNov 17, 2006

  • CVE-2006-5988
    24Monitor

    Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows remote attackers to cause a denial of service

    MediumCVSS 5.0No exploitEPSS 13%

    microsoft · windows 2000Nov 20, 2006

  • CVE-2006-3890
    41Plan

    Stack-based buffer overflow in the Sky Software FileView ActiveX control, as used in WinZip 10 before build 7245 and in certain other applic

    CriticalCVSS 9.3Proof of conceptEPSS 14%

    sky software · fileview activex controlNov 21, 2006

  • CVE-2006-6010
    40Plan

    SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcC

    MediumCVSS 5.0WeaponizedEPSS 14%

    sap · sap web application serverNov 21, 2006

  • CVE-2006-6026
    43Plan

    Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows r

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    realnetworks · helix dna serverNov 21, 2006

  • CVE-2006-6027
    50Plan

    Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary co

    CriticalCVSS 9.3Proof of conceptEPSS 44%

    adobe · acrobat readerNov 21, 2006

  • CVE-2006-6059
    46Plan

    Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via

    CriticalCVSS 10.0Proof of conceptEPSS 18%

    netgear · ma521 driverNov 21, 2006

  • CVE-2006-6061
    40Plan

    com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code

    CriticalCVSS 9.3No exploitEPSS 10%

    apple · mac os xNov 21, 2006

  • CVE-2006-6063
    48Plan

    Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containin

    HighCVSS 7.5WeaponizedEPSS 59%

    un4seen · xmplayNov 21, 2006

  • CVE-2006-6076
    62This week

    Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows rem

    CriticalCVSS 10.0WeaponizedEPSS 72%

    ca · brightstor arcserve backupNov 24, 2006

  • CVE-2006-6097
    20Monitor

    GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contai

    MediumCVSS 4.0Proof of conceptEPSS 11%

    gnu · tarNov 24, 2006

  • CVE-2006-6121
    41Plan

    Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    acer · lunchapp.aplunchNov 26, 2006

  • CVE-2006-6125
    34Monitor

    Heap-based buffer overflow in the wireless driver (WG311ND5.SYS) 2.3.1.10 for NetGear WG311v1 wireless adapter allows remote attackers to ex

    HighCVSS 7.5Proof of conceptEPSS 14%

    netgear · wg311v1Nov 26, 2006

  • CVE-2006-5750
    34Monitor

    Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows rem

    HighCVSS 7.5No exploitEPSS 14%

    jboss · jboss application serverNov 27, 2006

  • CVE-2006-6133
    46Plan

    Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and

    HighCVSS 7.6Proof of conceptEPSS 51%

    microsoft · visual studio .netNov 27, 2006

  • CVE-2006-6134
    43Plan

    Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows

    HighCVSS 7.5No exploitEPSS 42%

    microsoft · windows media playerNov 27, 2006

  • CVE-2006-6170
    35Monitor

    Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other produ

    HighCVSS 7.5No exploitEPSS 17%

    proftpd project · proftpdNov 30, 2006

  • CVE-2006-6183
    61This week

    Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (cr

    CriticalCVSS 10.0WeaponizedEPSS 70%

    3com · 3ctftpsvcNov 30, 2006

  • CVE-2006-6184
    60This week

    Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a d

    CriticalCVSS 10.0WeaponizedEPSS 65%

    alliedtelesyn · at-tftpNov 30, 2006

  • CVE-2006-6199
    50Plan

    Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute a

    HighCVSS 7.5WeaponizedEPSS 65%

    blazevideo · blaze dvdNov 30, 2006

  • CVE-2006-6201
    31Monitor

    Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006;

    HighCVSS 7.5No exploitEPSS 3%

    revilloc · mailserverNov 30, 2006