Skip to content
OpenAdvisories

Archive

March 2006

Vulnerabilities first published in this month (UTC), newest first.

← February 2006 2006 / March April 2006 →
  1. 110
  2. 221
  3. 324
  4. 4 
  5. 5 
  6. 618
  7. 752
  8. 84
  9. 958
  10. 1029
  11. 11 
  12. 1213
  13. 1310
  14. 1450
  15. 1512
  16. 161
  17. 173
  18. 18 
  19. 1963
  20. 205
  21. 2122
  22. 2219
  23. 2323
  24. 2420
  25. 253
  26. 267
  27. 271
  28. 2842
  29. 2922
  30. 3037
  31. 3116
All Critical High Medium Low Exploited only Public exploit

585 results · Feed

  • Unscored —
    CVE-2006-0052

    The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library email module 2.5, allow…

  • Unscored —
    CVE-2006-1559

    SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the searc…

  • Unscored —
    CVE-2006-1563

    Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allo…

  • Unscored —
    CVE-2006-1556 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers …

  • Unscored —
    CVE-2006-1557 Public exploit

    Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-1566

    Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an RPATH value under the /…

  • Unscored —
    CVE-2006-1561

    SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote attack…

  • Unscored —
    CVE-2006-1565

    Untrusted search path vulnerability in libgpib-perl 3.2.06-2 in Debian GNU/Linux includes an RPATH value under the /tmp…

  • Unscored —
    CVE-2006-1560

    Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-1554

    Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2006-1564

    Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values …

    subversion Debian
  • Unscored —
    CVE-2006-1552

    Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2006-1558

    Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-1562

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) …

  • Unscored —
    CVE-2006-1553

    SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allow…

  • Unscored —
    CVE-2006-1555

    VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the…

  • Unscored —
    CVE-2006-1550

    Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-ass…

    dia Debian
  • High 7.5
    CVE-2006-1547 Exploited EPSS 55%

    Improper Input Validation in Apache Struts

    ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler metho…

    struts:struts Maven
    KEV Jan 21, 2022
  • Low 3.7
    CVE-2006-1548

    Cross-site scripting in Apache Struts

    Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parame…

    struts:struts Maven
  • High 7.3
    CVE-2006-1546

    Apache Struts vulnerable to Improper Input Validation

    Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applicatio…

    struts:struts Maven
  • Unscored —
    CVE-2006-1059

    The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, whi…

    samba Debian
  • Unscored —
    CVE-2006-1540 Public exploit EPSS 29%

    MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of…

  • Unscored —
    CVE-2006-1543 Public exploit

    Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-1533

    SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-1545

    Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remot…

  • Unscored —
    CVE-2006-1536 Public exploit

    Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to exe…

  • Unscored —
    CVE-2006-1538

    The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext,…

  • Unscored —
    CVE-2006-1544

    Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remot…

  • Unscored —
    CVE-2006-1537

    Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1)…

  • Unscored —
    CVE-2006-1535 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote …

  • Unscored —
    CVE-2006-1542 Public exploit

    Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, all…

  • Unscored —
    CVE-2006-1532

    Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allo…

  • Unscored —
    CVE-2006-1541

    SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-1534

    Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via (1) th…

  • Unscored —
    CVE-2006-1539

    Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo L…

    bsdgames Debian
  • Unscored —
    CVE-2006-1504 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal or ADP) stable allow re…

  • Unscored —
    CVE-2006-1505

    base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when running in standalone mo…

  • Unscored —
    CVE-2006-1510 Public exploit EPSS 14%

    Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassemb…

  • Unscored —
    CVE-2006-1503

    PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier a…

  • Unscored —
    CVE-2006-1511

    Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers …