Skip to content
OpenAdvisories

Archive

19 January 2006

Vulnerabilities first published on this day (UTC), newest first.

25 results · Feed

  • Unscored —
    CVE-2006-0324 Public exploit

    SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass…

  • Unscored —

    Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javas…

  • Unscored —

    Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-0316 EPSS 10%

    Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AO…

  • Unscored —
    CVE-2006-0315 Public exploit

    index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php…

  • Unscored —
    CVE-2006-0318 Public exploit

    SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to …

  • Unscored —
    CVE-2006-0312 Public exploit

    create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the…

  • Unscored —

    Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for …

  • Unscored —

    PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' pa…

  • Unscored —
    CVE-2006-0311 Public exploit

    SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —

    Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of…

  • Unscored —
    CVE-2006-0319 Public exploit

    Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to…

  • Unscored —
    CVE-2006-0317 Public exploit

    Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attacker…

  • Unscored —
    CVE-2006-0310 Public exploit

    Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a …

  • Unscored —
    CVE-2006-0320 Public exploit

    SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary S…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web scr…

  • Unscored —

    The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unkno…

  • Unscored —
    CVE-2006-0306 Public exploit EPSS 12%

    The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup…

  • Unscored —

    Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, an…

  • Unscored —
    CVE-2006-0304 Public exploit

    Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) an…

  • Unscored —

    ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive informat…

  • Unscored —

    The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightSt…

  • Unscored —

    Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone running firmware 1.1.12 (051129) and CP-100E VoIP 802.11b Wireles…

  • Unscored —
    CVE-2006-0308 Public exploit

    PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, mod…