Skip to content
OpenAdvisories

Archive

10 January 2006

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —
    CVE-2006-0010 EPSS 33%

    Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Win…

  • Unscored —
    CVE-2006-0002 EPSS 46%

    Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP…

  • Unscored —
    CVE-2006-0020 EPSS 19%

    An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary …

  • Unscored —

    SQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to execute arbitrary SQL …

  • Unscored —

    PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denia…

  • Unscored —

    Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command lin…

  • Unscored —
    CVE-2006-0162 EPSS 10%

    Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a…

  • Unscored —

    Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vaguen…

  • Unscored —
    CVE-2006-0154 Public exploit

    SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL c…

  • Unscored —

    Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-0160 Public exploit

    SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-0157 Public exploit

    settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via th…

  • Unscored —

    SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL command…

  • Unscored —

    SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-0153 Public exploit

    427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, whi…

  • Unscored —

    SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute ar…

  • Unscored —

    SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —

    Buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions bef…