Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
509 results · Feed
-
Unscored —
The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service …
-
Unscored —
SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-0407 Public exploit
Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attac…
-
Unscored —
Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other so…
-
Unscored —
Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands.
-
Unscored —
Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows …
-
Unscored —
rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code vi…
-
Unscored —CVE-2006-0409 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject ar…
-
Unscored —
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reve…
-
Unscored —
fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafte…
-
Unscored —
The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an inf…
-
Unscored —
ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows …
-
Unscored —
ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows …
-
Unscored —
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, k…
-
Unscored —
The mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement"…
-
Unscored —
The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, whe…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-3653 EPSS 19%
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechn…
-
Unscored —CVE-2006-0355 Public exploit
Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a l…
-
Unscored —
MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM informatio…
-
Unscored —
Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, wh…
-
Unscored —CVE-2006-0366 Public exploit
Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-0361 Public exploit
Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-0376 EPSS 18%
The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 doe…
-
Unscored —CVE-2006-0358 Public exploit
Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute…
-
Unscored —
Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented port…
-
Unscored —
Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4.1(3)SR2 allow remote …
-
Unscored —
Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER c…
-
Unscored —
Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Ne…
-
Unscored —
Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-0357 Public exploit
Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified …
-
Unscored —CVE-2006-0372 Public exploit
Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to…
-
Unscored —
The "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format under the HKEY_CURRENT_…
-
Unscored —
MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a…
-
Unscored —
Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial…
-
Unscored —
Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 b…
-
Unscored —
TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web scri…