Skip to content
OpenAdvisories

Archive

11 January 2006

Vulnerabilities first published on this day (UTC), newest first.

← December 2005 2006 / January /11 February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2006-0168

    Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2006-0179 Public exploit EPSS 14%

    The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pac…

  • Unscored —
    CVE-2006-0166

    Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protec…

  • Medium 5.3
    CVE-2006-0054

    The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP…

  • Unscored —
    CVE-2006-0055

    The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being…

  • Unscored —
    CVE-2006-0177 Public exploit

    Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/sc…

  • Unscored —
    CVE-2006-0167 Public exploit

    SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_…

  • Unscored —
    CVE-2006-0169

    addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-0171 Public exploit

    PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-0163 Public exploit

    SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attacke…

  • Unscored —
    CVE-2006-0172

    Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Ente…

  • Unscored —
    CVE-2006-0165

    Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamm…

  • Unscored —
    CVE-2006-0173 Public exploit

    Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrep…

  • Unscored —
    CVE-2006-0035

    The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of …

  • Unscored —
    CVE-2006-0174 Public exploit

    Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain…

  • Unscored —
    CVE-2006-0164 Public exploit

    phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary…

  • Unscored —
    CVE-2006-0175 Public exploit

    Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-0176 Public exploit

    Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow lo…

  • Unscored —
    CVE-2006-0178

    Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format strin…

  • Unscored —
    CVE-2005-4647 Public exploit

    Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-4645

    SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the Lang…

  • Medium 6.1
    CVE-2005-4644

    Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.

    trac trac Debian PyPI
  • Unscored —
    CVE-2005-4646 Public exploit

    Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary file…

  • Unscored —
    CVE-2005-3713

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF …

  • Unscored —
    CVE-2005-3710

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image fil…

  • Unscored —
    CVE-2005-3709

    Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and poss…

  • Unscored —
    CVE-2005-3708

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA imag…

  • Unscored —
    CVE-2005-3707

    Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image…

  • Unscored —
    CVE-2005-3711

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image fil…

  • Unscored —
    CVE-2005-2340 Public exploit EPSS 26%

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a craf…