Skip to content
OpenAdvisories

Archive

January 2006

Vulnerabilities first published in this month (UTC), newest first.

← December 2005 2006 / January February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

509 results · Feed

  • Unscored —
    CVE-2006-0071

    The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local user…

  • Unscored —
    CVE-2006-0072 Public exploit

    Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o comma…

  • Unscored —
    CVE-2006-0073 Public exploit

    Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote att…

  • Unscored —
    CVE-2005-4608

    SQL injection vulnerability in index.php in BugPort 1.147 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-4607

    Cross-site scripting (XSS) vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2005-4609

    index.php in BugPort 1.147 and earlier allows remote attackers to obtain sensitive information such as full path and sy…

  • Unscored —
    CVE-2006-0069

    Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-0068

    SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-0066 Public exploit

    SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-0065

    SQL injection vulnerability in (1) functions.php, (2) functions_update.php, and (3) functions_display.php in VEGO Web F…

  • Unscored —
    CVE-2006-0067

    SQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-0064 Public exploit

    PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute a…

  • Unscored —
    CVE-2005-4606

    SQL injection vulnerability in check_user.asp in multiple Web Wiz products including (1) Site News 3.06 and earlier, (2…

  • Unscored —
    CVE-2005-4605 Public exploit

    The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive ker…

  • Unscored —
    CVE-2005-4604

    Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long H…

  • Unscored —
    CVE-2005-4603

    Cross-site scripting (XSS) vulnerability in printthread.php in MyBB 1.0.1 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2005-4602

    SQL injection vulnerability in inc/function_upload.php in MyBB before 1.0.1 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2005-2341

    Heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows remote attackers to cause a…

  • Unscored —
    CVE-2005-2342

    Research in Motion (RIM) BlackBerry Router allows remote attackers to cause a denial of service (communication disrupti…

  • Unscored —
    CVE-2005-2343

    Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers t…

  • Unscored —
    CVE-2005-4593 Public exploit EPSS 14%

    PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allow…

  • Unscored —
    CVE-2005-4601

    The delegate code in ImageMagick 6.2.4.5-0.3 allows remote attackers to execute arbitrary commands via shell metacharac…

    imagemagick graphicsmagick Debian
  • Unscored —
    CVE-2005-4595

    Untrusted search path vulnerability (RPATH) in XnView 1.70 and NView 4.51 on Gentoo Linux allows local users to execute…

  • Unscored —
    CVE-2005-4596 Public exploit

    Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-4598 Public exploit

    Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-4594

    Stack-based buffer overflow in TUGZip 3.4.0.0 allows remote attackers to execute arbitrary code via a long filename in …

  • Unscored —
    CVE-2005-4600 Public exploit

    Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to…

    wordpress Debian
  • Unscored —
    CVE-2005-4597

    Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 1.7 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-4599

    Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attac…