Skip to content
OpenAdvisories

Archive

January 2006

Vulnerabilities first published in this month (UTC), newest first.

← December 2005 2006 / January February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

509 results · Feed

  • Unscored —
    CVE-2005-4625

    Drivers for certain display adapters, including (1) an unspecified ATI driver and (2) an unspecified Intel driver, migh…

  • Unscored —
    CVE-2005-4622 Public exploit

    Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary fil…

  • Unscored —
    CVE-2005-4085 Public exploit EPSS 66%

    Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4…

  • Unscored —
    CVE-2005-3538

    hfaxd in HylaFAX 4.2.3, when PAM support is disabled, accepts arbitrary passwords, which allows remote attackers to gai…

    hylafax Debian
  • Unscored —
    CVE-2005-3539 Public exploit EPSS 13%

    Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary comman…

    hylafax Debian
  • Unscored —
    CVE-2005-3656

    Multiple format string vulnerabilities in logging functions in mod_auth_pgsql before 2.0.3, when used for user authenti…

  • Unscored —
    CVE-2005-3654

    Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of service (crash) and possibly e…

  • Unscored —
    CVE-2005-3714

    The network interface for Apple AirPort Express 6.x before Firmware Update 6.3, and AirPort Extreme 5.x before Firmware…

  • Unscored —
    CVE-2005-3187 Public exploit

    The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2006-0063

    Cross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled, allows remote attackers …

  • Unscored —
    CVE-2006-0085

    SQL injection vulnerability in Nkads 1.0 alfa 3 allows remote attackers to execute arbitrary SQL commands via the (1) u…

  • Unscored —
    CVE-2006-0084

    Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-0094

    PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-0091

    Cross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, al…

  • Unscored —
    CVE-2006-0088 Public exploit

    SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-0089

    Buffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service (application crash) and p…

  • Unscored —
    CVE-2006-0093

    Cross-site scripting (XSS) vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-0090

    Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view ar…

  • Unscored —
    CVE-2006-0086

    Cross-site scripting vulnerability in index.php in Next Generation Image Gallery 0.0.1 Lite Edition allows remote attac…

  • Unscored —
    CVE-2006-0087 Public exploit

    SQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows remote attackers to exec…

  • Unscored —
    CVE-2005-4618

    Buffer overflow in sysctl in the Linux Kernel 2.6 before 2.6.15 allows local users to corrupt user memory and possibly …

  • Unscored —
    CVE-2005-4619 Public exploit

    SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-0082

    Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and Graph…

    imagemagick Debian
  • Unscored —
    CVE-2006-0079 Public exploit

    SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-0078

    Multiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-0081

    ialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308 allows attackers to cause …

  • Unscored —
    CVE-2006-0080

    Cross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions, allows remote attackers to …

  • Unscored —
    CVE-2005-4615

    SQL injection vulnerability in news.php in DapperDesk 3.0.1 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-4616

    SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-4613

    Cross-site scripting (XSS) vulnerability in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2005-4614

    Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-4612

    Multiple SQL injection vulnerabilities in VUBB alpha rc1 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2005-4617

    SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2005-4611

    SQL injection vulnerability in search.php in Free ClickBank 1.0 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-0074 Public exploit

    SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-0076 Public exploit

    PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-0075 Public exploit

    Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-0077

    Off-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to trigger a buffer overflow vi…

  • Unscored —
    CVE-2005-4610

    Format string vulnerability in the server for Dopewars before 1.5.12, when running as an NT service, allows remote atta…

  • Unscored —
    CVE-2006-0070

    Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Jav…