Skip to content
OpenAdvisories

Archive

January 2006

Vulnerabilities first published in this month (UTC), newest first.

← December 2005 2006 / January February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

509 results · Feed

  • Unscored —
    CVE-2006-0226

    Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for …

  • Unscored —
    CVE-2006-0314

    PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' pa…

  • Unscored —
    CVE-2006-0311 Public exploit

    SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-0309

    Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of…

  • Unscored —
    CVE-2006-0319 Public exploit

    Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to…

  • Unscored —
    CVE-2006-0317 Public exploit

    Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attacker…

  • Unscored —
    CVE-2006-0310 Public exploit

    Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a …

  • Unscored —
    CVE-2006-0320 Public exploit

    SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-4665

    Cross-site scripting (XSS) vulnerability in PunBB 1.2.6 and earlier allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2005-3340

    The tuxpaint-import.sh script in Tux Paint (tuxpaint) 0.9.14 and earlier creates temporary files insecurely, with unkno…

    tuxpaint Debian
  • Unscored —
    CVE-2006-0306 Public exploit EPSS 12%

    The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup…

  • Unscored —
    CVE-2006-0303

    Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, an…

  • Unscored —
    CVE-2006-0304 Public exploit

    Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) an…

  • Unscored —
    CVE-2006-0302

    ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive informat…

  • Unscored —
    CVE-2006-0307

    The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightSt…

  • Unscored —
    CVE-2006-0305

    Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone running firmware 1.1.12 (051129) and CP-100E VoIP 802.11b Wireles…

  • Unscored —
    CVE-2006-0308 Public exploit

    PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, mod…

  • Unscored —
    CVE-2006-0275

    Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecifie…

  • Unscored —
    CVE-2006-0269

    Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecif…

  • Unscored —
    CVE-2006-0283

    Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite …

  • Unscored —
    CVE-2006-0259

    Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as …

  • Unscored —
    CVE-2006-0280

    Unspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10, and 8.9 Bundle 2 has uns…

  • Unscored —
    CVE-2006-0285

    Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, …

  • Unscored —
    CVE-2006-0274

    Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2…

  • Unscored —
    CVE-2006-0266

    Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has…

  • Unscored —
    CVE-2006-0291

    Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Colla…

  • Unscored —
    CVE-2006-0258

    Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspeci…

  • Unscored —
    CVE-2006-0257

    Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.…

  • Unscored —
    CVE-2006-0282

    Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, Application …

  • Unscored —
    CVE-2006-0290

    Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Sui…

  • Unscored —
    CVE-2006-0279

    Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack…

  • Unscored —
    CVE-2006-0271

    Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and…

  • Unscored —
    CVE-2006-0267

    Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecifi…

  • Unscored —
    CVE-2006-0263

    Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 1…

  • Unscored —
    CVE-2006-0289 EPSS 13%

    Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications …

  • Unscored —
    CVE-2006-0288

    Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and…

  • Unscored —
    CVE-2006-0276

    Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecifi…

  • Unscored —
    CVE-2006-0284

    Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Appl…

  • Unscored —
    CVE-2006-0260

    Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack …

  • Unscored —
    CVE-2006-0281

    Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1 has unspecified impact and attack vectors, a…