Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
509 results · Feed
-
Unscored —
Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of …
-
Unscored —
Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbit…
-
Unscored —
Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service…
-
Unscored —
Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a …
-
Unscored —
Cross-site scripting (XSS) vulnerability in guestbook.php in my little homepage my little guestbook, as last modified i…
-
Unscored —CVE-2006-0473 Public exploit
Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my little forum,…
-
Unscored —CVE-2006-0478 Public exploit
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files…
-
Unscored —
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file wit…
-
Unscored —CVE-2006-0480 Public exploit
Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitra…
-
Unscored —
Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an inde…
-
Unscored —
PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service (ping f…
-
Unscored —
Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via (1) a large packet …
-
Unscored —CVE-2006-0470 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject…
-
Unscored —CVE-2006-0479 Public exploit
pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanism…
-
Unscored —CVE-2005-4676 Public exploit
Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, …
-
Unscored —
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local…
-
Unscored —
Unspecified vulnerability in Pioneers (formerly gnocatan) before 0.9.49 allows remote attackers to cause a denial of se…
-
Unscored —
Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gp…
-
Unscored —CVE-2006-0469 Public exploit
Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to i…
-
Unscored —
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly exec…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary …
-
Unscored —CVE-2006-0461 Public exploit
Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject …
-
Unscored —
Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script …
-
Unscored —
Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.asp in Goldstag Content Management System allows remote attackers to…
-
Unscored —CVE-2006-0462 Public exploit
SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary …
-
Unscored —
ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote att…
-
Unscored —CVE-2005-4671 Public exploit
Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remot…
-
Unscored —CVE-2005-4674 Public exploit
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary …
-
Unscored —CVE-2005-4675 Public exploit
Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrar…
-
Unscored —CVE-2005-4670 Public exploit
Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attack…
-
Unscored —
Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown…
-
Unscored —
Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has …
-
Unscored —CVE-2006-0057 EPSS 20%
Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous Acti…
-
Unscored —CVE-2006-0450 Public exploit
phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering ma…
-
Unscored —
Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers t…
-
Unscored —
Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary command…
-
Unscored —
Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the IMAP service in E-Post…