Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
509 results · Feed
-
Unscored —
Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .t…
-
Unscored —CVE-2006-0359 Public exploit
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device c…
-
Unscored —
unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local user…
-
Unscored —CVE-2006-0349 Public exploit
SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id paramet…
-
Unscored —CVE-2006-0345 Public exploit
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2006-0350 Public exploit
Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML v…
-
Unscored —
Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denia…
-
Unscored —
The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —
Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.
-
Unscored —
Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the…
-
Unscored —
Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
SQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows remote attackers to execu…
-
Unscored —
Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name li…
-
Unscored —
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52…
-
Unscored —CVE-2006-0328 Public exploit
Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string spec…
-
Unscored —
Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows atta…
-
Unscored —
Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) v…
-
Unscored —
Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may al…
-
Unscored —CVE-2006-0341 Public exploit
Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject…
-
Unscored —
Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a …
-
Unscored —
Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for W…
-
Unscored —
Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on vari…
-
Unscored —
RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CP…
-
Unscored —
TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic…
-
Unscored —
Directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote attackers to read and write ar…
-
Unscored —CVE-2006-0331 Public exploit
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via lo…
-
Unscored —
Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006…
-
Unscored —
Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2…
-
Unscored —
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain priv…
-
Unscored —CVE-2006-0324 Public exploit
SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass…
-
Unscored —
Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHlyMail before 3.3 Beta1 allows remote attackers to inject arbitrary Javas…
-
Unscored —
Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-0316 EPSS 10%
Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AO…
-
Unscored —CVE-2006-0315 Public exploit
index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php…
-
Unscored —CVE-2006-0318 Public exploit
SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to …
-
Unscored —CVE-2006-0312 Public exploit
create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the…