Skip to content
OpenAdvisories

Archive

22 January 2006

Vulnerabilities first published on this day (UTC), newest first.

← December 2005 2006 / January /22 February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

24 results · Feed

  • Unscored —
    CVE-2006-0355 Public exploit

    Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a l…

  • Unscored —
    CVE-2006-0369

    MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM informatio…

  • Unscored —
    CVE-2006-0370

    Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, wh…

  • Unscored —
    CVE-2006-0366 Public exploit

    Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-0361 Public exploit

    Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-0376 EPSS 18%

    The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 doe…

  • Unscored —
    CVE-2006-0358 Public exploit

    Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute…

  • Unscored —
    CVE-2006-0374

    Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented port…

  • Unscored —
    CVE-2006-0368

    Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote …

  • Unscored —
    CVE-2006-0356

    Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER c…

  • Unscored —
    CVE-2006-0375

    Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Ne…

  • Unscored —
    CVE-2006-0373

    Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-0365

    Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2006-0357 Public exploit

    Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified …

  • Unscored —
    CVE-2006-0372 Public exploit

    Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to…

  • Unscored —
    CVE-2006-0363

    The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_…

  • Unscored —
    CVE-2006-0360

    MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a…

  • Unscored —
    CVE-2006-0354 Public exploit EPSS 10%

    Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial…

  • Unscored —
    CVE-2006-0367

    Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 b…

  • Unscored —
    CVE-2006-0362

    TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote att…

  • Unscored —
    CVE-2006-0364

    Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-0371

    Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .t…

  • Unscored —
    CVE-2006-0359 Public exploit

    Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device c…

  • Unscored —
    CVE-2006-0353

    unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local user…

    lsh-utils Debian