Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
509 results · Feed
-
Unscored —
Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier generates differe…
-
Unscored —CVE-2006-0125 Public exploit
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via t…
-
Unscored —CVE-2006-0135 Public exploit
SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2)…
-
Unscored —
The nl_fib_input function in fib_frontend.c in the Linux kernel before 2.6.15 does not check for valid lengths of the h…
-
Unscored —
SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inj…
-
Unscored —
Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request…
-
Unscored —
SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
SQL injection vulnerability in poll_frame.php in Vote! Pro 4.0 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
SQL injection vulnerability in index.php in Zina 0.12.07 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —
SQL injection vulnerability in index.php in HelpDeskPoint 2.38 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
SQL injection vulnerability in SMBCMS 2.1 allows remote attackers to execute arbitrary SQL commands via unspecified sea…
-
Unscored —
SQL injection vulnerability in mcl_login.asp in Timecan CMS allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-0110 Public exploit
Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary…
-
Unscored —
SQL injection vulnerability in Timecan CMS allows remote attackers to execute arbitrary SQL commands via the viewID par…
-
Unscored —
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitra…
-
Unscored —
Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject …
-
Unscored —CVE-2005-3357 EPSS 24%
mod_ssl in Apache 2.0 up to 2.0.55, when configured with an SSL vhost with access control and a custom error 400 error …
-
Unscored —
Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, a…
-
Unscored —
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextr…
-
Unscored —
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attacke…
-
Unscored —
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attacke…
-
Unscored —
gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function ca…
-
Unscored —CVE-2006-0103 Public exploit
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web ro…
-
Unscored —
Buffer overflow in NicoFTP 3.0.1.19 and earlier might allow local users to execute arbitrary code via a long string in …
-
Unscored —
Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitr…
-
Unscored —
wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for…
-
Unscored —
Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Wi…
-
Unscored —
dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disc…
-
Unscored —
The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to …
-
Unscored —CVE-2006-0099 Public exploit
PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/tem…
-
Unscored —CVE-2005-4627 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0…
-
Unscored —
The default configuration of Recruitment Software installs admin/site.xml under the web document root with insufficient…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the editavatar page in vBulletin 3.5.1 allows remote attackers to inject ar…
-
Unscored —
upload.exe in eFileGo 3.01 allows remote attackers to cause a denial of service (CPU consumption) via an argument with …
-
Unscored —CVE-2005-4620 Public exploit
Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argumen…
-
Unscored —
The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memor…