Skip to content
OpenAdvisories

Archive

3 March 2006

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows use…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote atta…

  • Unscored —

    Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files a…

  • Unscored —

    FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, whic…

  • Unscored —

    EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote a…

  • Unscored —

    Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact an…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-0983 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-0976 Public exploit

    Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers t…

  • Unscored —
    CVE-2006-0971 Public exploit

    Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files v…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier …

  • Unscored —
    CVE-2006-0987 Public exploit EPSS 58%

    The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queri…

  • Unscored —
    CVE-2006-0984 Public exploit

    Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-0973 Public exploit

    SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote a…

  • Unscored —

    Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail…

  • Unscored —
    CVE-2006-0974 Public exploit

    Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject …

  • Unscored —

    Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arb…

  • Unscored —

    PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mai…

  • Unscored —
    CVE-2006-0972 Public exploit

    SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary…

  • Unscored —

    The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious cont…

  • Unscored —

    PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allo…

  • Unscored —

    WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default…

  • Unscored —
    CVE-2006-0988 Public exploit EPSS 60%

    The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Serv…