Skip to content
OpenAdvisories

Archive

6 January 2006

Vulnerabilities first published on this day (UTC), newest first.

← December 2005 2006 / January /6 February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2005-3357 EPSS 24%

    mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error …

    apache2 Debian
  • Unscored —
    CVE-2005-3627

    Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, a…

    poppler cups xpdf libextractor Debian
  • Unscored —
    CVE-2005-3624

    The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextr…

    poppler cups xpdf libextractor Debian
  • Unscored —
    CVE-2005-3626

    Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attacke…

    poppler cups xpdf libextractor Debian
  • Unscored —
    CVE-2005-3625

    Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attacke…

    poppler cups xpdf libextractor Debian
  • Unscored —
    CVE-2006-0106

    gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function ca…

    wine Debian
  • Unscored —
    CVE-2006-0103 Public exploit

    TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web ro…

  • Unscored —
    CVE-2006-0100

    Buffer overflow in NicoFTP 3.0.1.19 and earlier might allow local users to execute arbitrary code via a long string in …

  • Unscored —
    CVE-2006-0104

    Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account,…

  • Unscored —
    CVE-2006-0102

    Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-0096

    wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for…

  • Unscored —
    CVE-2006-0097 Public exploit EPSS 12%

    Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Wi…

  • Unscored —
    CVE-2006-0095

    dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disc…

  • Unscored —
    CVE-2006-0098

    The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files …

  • Unscored —
    CVE-2006-0101

    Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to …

  • Unscored —
    CVE-2006-0099 Public exploit

    PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/tem…

  • Unscored —
    CVE-2005-4627 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0…

  • Unscored —
    CVE-2005-4626

    The default configuration of Recruitment Software installs admin/site.xml under the web document root with insufficient…

  • Unscored —
    CVE-2005-4621

    Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4623

    upload.exe in eFileGo 3.01 allows remote attackers to cause a denial of service (CPU consumption) via an argument with …

  • Unscored —
    CVE-2005-4620 Public exploit

    Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argumen…

  • Unscored —
    CVE-2005-4624

    The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2005-4625

    Drivers for certain display adapters, including (1) an unspecified ATI driver and (2) an unspecified Intel driver, migh…

  • Unscored —
    CVE-2005-4622 Public exploit

    Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary fil…

  • Unscored —
    CVE-2005-4085 Public exploit EPSS 66%

    Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4…

  • Unscored —
    CVE-2005-3538

    hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gai…

    hylafax Debian
  • Unscored —
    CVE-2005-3539 Public exploit EPSS 13%

    Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary comman…

    hylafax Debian
  • Unscored —
    CVE-2005-3656

    Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authenti…

  • Unscored —
    CVE-2005-3654

    Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly e…