Skip to content
OpenAdvisories

Archive

18 January 2006

Vulnerabilities first published on this day (UTC), newest first.

62 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject a…

  • Unscored —

    SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multi…

  • Unscored —

    Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to exe…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to…

  • Unscored —

    Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote atta…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML v…

  • Unscored —

    Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges…

  • Unscored —
    CVE-2006-0244 Public exploit

    Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary f…

  • Unscored —

    Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build …

  • Unscored —

    nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun So…

  • Unscored —

    Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and o…

  • Unscored —
    CVE-2006-0237 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-0235 Public exploit

    SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir par…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-0240 Public exploit

    Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —

    SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL com…

  • Unscored —

    GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to e…

  • Unscored —

    Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script o…

  • Unscored —

    Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web sc…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-0234 Public exploit

    SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —

    The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local user…