Skip to content
OpenAdvisories

Archive

6 March 2006

Vulnerabilities first published on this day (UTC), newest first.

← February 2006 2006 / March /6 April 2006 →
  1. 110
  2. 221
  3. 324
  4. 4 
  5. 5 
  6. 618
  7. 752
  8. 84
  9. 958
  10. 1029
  11. 11 
  12. 1213
  13. 1310
  14. 1450
  15. 1512
  16. 161
  17. 173
  18. 18 
  19. 1963
  20. 205
  21. 2122
  22. 2219
  23. 2323
  24. 2420
  25. 253
  26. 267
  27. 271
  28. 2842
  29. 2922
  30. 3037
  31. 3116
All Critical High Medium Low Exploited only Public exploit

18 results · Feed

  • Unscored —
    CVE-2006-0458

    The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and possibly other distribut…

  • Unscored —
    CVE-2006-0815

    NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" (forward…

  • Unscored —
    CVE-2006-0814 EPSS 11%

    response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbi…

  • Unscored —
    CVE-2006-0949

    RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests i…

  • Unscored —
    CVE-2006-1011

    LetterMerger 1.2 stores user information in Access database files with insecure permissions, which allows local users t…

  • Unscored —
    CVE-2006-1012

    SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to exec…

    wordpress Debian
  • Unscored —
    CVE-2006-1010 Public exploit EPSS 18%

    Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers t…

    crossfire Debian
  • Unscored —
    CVE-2006-0387

    Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers t…

  • Unscored —
    CVE-2006-1006

    Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2006-1009

    M4 Project enigma-suite before 0.73.3 (Windows) has a default password of "nominal" for the "enigma-client" account, wh…

  • Unscored —
    CVE-2006-1004

    Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2006-1005

    agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering…

  • Unscored —
    CVE-2006-1003

    The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, w…

  • Unscored —
    CVE-2006-1007 Public exploit

    Multiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-1002

    NETGEAR WGT624 Wireless DSL router has a default account of super_username "Gearguy" and super_passwd "Geardog", which …

  • Unscored —
    CVE-2006-1000 Public exploit

    Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbit…

  • Unscored —
    CVE-2006-1001 Public exploit

    SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote…

  • Unscored —
    CVE-2006-1008 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web…