Skip to content
OpenAdvisories

Archive

21 January 2006

Vulnerabilities first published on this day (UTC), newest first.

← December 2005 2006 / January /21 February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2006-0349 Public exploit

    SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id paramet…

  • Unscored —
    CVE-2006-0345 Public exploit

    Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-0350 Public exploit

    Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML v…

  • Unscored —
    CVE-2006-0348

    Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denia…

  • Unscored —
    CVE-2006-0352

    The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient a…

  • Unscored —
    CVE-2006-0346

    Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2006-0351

    Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.

  • Unscored —
    CVE-2006-0347

    Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the…

  • Unscored —
    CVE-2006-0333

    Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2006-0329

    SQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows remote attackers to execu…

  • Unscored —
    CVE-2006-0339

    Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name li…

  • Unscored —
    CVE-2006-0338

    Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52…

  • Unscored —
    CVE-2006-0328 Public exploit

    Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string spec…

  • Unscored —
    CVE-2006-0343

    Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows atta…

  • Unscored —
    CVE-2006-0336

    Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) v…

  • Unscored —
    CVE-2006-0332

    Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may al…

  • Unscored —
    CVE-2006-0341 Public exploit

    Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote…

  • Unscored —
    CVE-2006-0330

    Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2006-0334

    Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2006-0335

    Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a …

  • Unscored —
    CVE-2006-0337

    Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for W…

  • Unscored —
    CVE-2006-0340

    Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on vari…

  • Unscored —
    CVE-2006-0342

    RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CP…

  • Unscored —
    CVE-2006-0327

    TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic…

  • Unscored —
    CVE-2006-0344

    Directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote attackers to read and write ar…

  • Unscored —
    CVE-2006-0331 Public exploit

    Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via lo…