Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
134 results · Clear filters · Feed
-
Unscored —CVE-2006-0473 Public exploit
Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, a…
-
Unscored —CVE-2006-0478 Public exploit
CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files…
-
Unscored —
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file wit…
-
Unscored —CVE-2006-0480 Public exploit
Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-0470 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject…
-
Unscored —CVE-2006-0479 Public exploit
pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanism…
-
Unscored —CVE-2005-4676 Public exploit
Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, …
-
Unscored —CVE-2006-0469 Public exploit
Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to i…
-
Unscored —
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly exec…
-
Unscored —CVE-2006-0461 Public exploit
Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject …
-
Unscored —CVE-2006-0462 Public exploit
SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-4671 Public exploit
Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attack…
-
Unscored —CVE-2005-4674 Public exploit
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary …
-
Unscored —CVE-2005-4675 Public exploit
Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrar…
-
Unscored —CVE-2005-4670 Public exploit
Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attack…
-
Unscored —CVE-2006-0450 Public exploit
phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering ma…
-
Unscored —CVE-2006-0443 Public exploit
Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-0444 Public exploit
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-0442 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers…
-
Unscored —
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER …
-
Unscored —CVE-2005-4667 Public exploit
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename …
-
Unscored —CVE-2006-0417 Public exploit
SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remo…
-
Unscored —CVE-2006-0418 Public exploit
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a craf…
-
Unscored —CVE-2006-0413 Public exploit
Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2006-0415 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject…
-
Unscored —CVE-2006-0407 Public exploit
Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attac…
-
Unscored —CVE-2006-0409 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject ar…
-
Unscored —CVE-2006-0355 Public exploit
Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a l…
-
Unscored —CVE-2006-0366 Public exploit
Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-0361 Public exploit
Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-0358 Public exploit
Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute…
-
Unscored —CVE-2006-0357 Public exploit
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified …
-
Unscored —CVE-2006-0372 Public exploit
Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to…
-
Unscored —
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial…
-
Unscored —CVE-2006-0359 Public exploit
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device c…
-
Unscored —CVE-2006-0349 Public exploit
SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id paramet…
-
Unscored —CVE-2006-0345 Public exploit
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2006-0350 Public exploit
Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML v…
-
Unscored —CVE-2006-0328 Public exploit
Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string spec…
-
Unscored —CVE-2006-0341 Public exploit
Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote…