Skip to content
OpenAdvisories

Archive

13 January 2006

Vulnerabilities first published on this day (UTC), newest first.

← December 2005 2006 / January /13 February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2006-0204

    Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-0208

    Multiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors and html_errors are on,…

  • Unscored —
    CVE-2006-0202

    Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly earlier has (1) world-read…

  • Unscored —
    CVE-2006-0199 Public exploit

    SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-0207

    Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject arbitrary HTTP headers v…

  • Unscored —
    CVE-2006-0196

    Unspecified vulnerability in Serial line sniffer (aka slsnif) 0.4.4 allows local users to gain privileges via a long va…

  • Unscored —
    CVE-2006-0201

    Dave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly earlier versions, allows …

  • Unscored —
    CVE-2006-0200 EPSS 20%

    Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow r…

  • Unscored —
    CVE-2006-0206 Public exploit

    Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-0198 Public exploit

    Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers …

  • Unscored —
    CVE-2006-0197

    The XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly including (1) the X serv…

  • Unscored —
    CVE-2006-0205

    Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-0203

    membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, whi…

  • Unscored —
    CVE-2005-4649

    Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to injec…

  • Unscored —
    CVE-2006-0191

    Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unsp…

  • Unscored —
    CVE-2006-0190

    Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a…

  • Unscored —
    CVE-2006-0192

    SQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-0193

    Cross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in Positive Software H-Sphere …

  • Unscored —
    CVE-2006-0194 Public exploit

    Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remo…

  • Unscored —
    CVE-2006-0189 Public exploit EPSS 16%

    Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a l…

  • Unscored —
    CVE-2003-1290

    BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote …