Skip to content
OpenAdvisories

Archive

January 2006

Vulnerabilities first published in this month (UTC), newest first.

← December 2005 2006 / January February 2006 →
  1. 19
  2. 26
  3. 38
  4. 424
  5. 515
  6. 629
  7. 712
  8. 8 
  9. 952
  10. 1021
  11. 1130
  12. 128
  13. 1321
  14. 149
  15. 152
  16. 1621
  17. 173
  18. 1862
  19. 1925
  20. 203
  21. 2126
  22. 2224
  23. 238
  24. 241
  25. 2537
  26. 2612
  27. 2720
  28. 28 
  29. 29 
  30. 303
  31. 3118
All Critical High Medium Low Exploited only Public exploit

509 results · Feed

  • Unscored —
    CVE-2006-0176 Public exploit

    Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow lo…

  • Unscored —
    CVE-2006-0178

    Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format strin…

  • Unscored —
    CVE-2005-4647 Public exploit

    Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-4645

    SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the Lang…

  • Medium 6.1
    CVE-2005-4644

    Trac HTML WikiProcessor cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.

    trac trac Debian PyPI
  • Unscored —
    CVE-2005-4646 Public exploit

    Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary file…

  • Unscored —
    CVE-2005-3713

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF …

  • Unscored —
    CVE-2005-3710

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image fil…

  • Unscored —
    CVE-2005-3709

    Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and poss…

  • Unscored —
    CVE-2005-3708

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA imag…

  • Unscored —
    CVE-2005-3707

    Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image…

  • Unscored —
    CVE-2005-3711

    Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image fil…

  • Unscored —
    CVE-2005-2340 Public exploit EPSS 26%

    Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a craf…

  • Unscored —
    CVE-2006-0010 EPSS 33%

    Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Win…

  • Unscored —
    CVE-2006-0002 EPSS 46%

    Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP…

  • Unscored —
    CVE-2006-0020 EPSS 19%

    An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP…

  • Unscored —
    CVE-2005-4642

    Multiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-4643

    SQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-0105

    PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denia…

  • Unscored —
    CVE-2004-0780

    Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command lin…

  • Unscored —
    CVE-2006-0162 EPSS 10%

    Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a…

    clamav Debian
  • Unscored —
    CVE-2006-0161

    Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vaguen…

  • Unscored —
    CVE-2006-0154 Public exploit

    SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-0152

    Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-0160 Public exploit

    SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-0155

    Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-0157 Public exploit

    settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password …

  • Unscored —
    CVE-2006-0156

    Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via th…

  • Unscored —
    CVE-2006-0159

    SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-0158

    SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-0153 Public exploit

    427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, whi…

  • Unscored —
    CVE-2005-4640

    SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2005-4641

    SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2005-4639

    Buffer overflow in the CA-driver (dst_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions bef…

  • Unscored —
    CVE-2006-0150

    Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allow…

  • Unscored —
    CVE-2006-0145

    The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets…

  • Unscored —
    CVE-2006-0151

    sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users t…

    sudo Debian
  • Unscored —
    CVE-2006-0148

    NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from …

  • Medium 6.1
    CVE-2006-0149

    Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to…

  • Unscored —
    CVE-2006-0146 Public exploit EPSS 13%

    The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuk…

    cacti libphp-adodb Debian