Archive
7 March 2006
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
Unscored —
Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 bef…
-
Unscored —
SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary S…
-
Unscored —
Linksys WRT54G routers version 5 (running VXWorks) allow remote attackers to cause a denial of service by sending a mal…
-
Unscored —
Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrar…
-
Unscored —
Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writabl…
-
Unscored —
SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbit…
-
Unscored —
Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown…
-
Unscored —
initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is …
-
Unscored —
Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, w…
-
Unscored —CVE-2006-0047 Public exploit
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted p…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-1039 Public exploit
SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP re…
-
Unscored —
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack ve…
-
Unscored —CVE-2006-1032 Public exploit
Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, e…
-
Unscored —CVE-2006-1046 Public exploit
server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a stri…
-
Unscored —CVE-2006-1034 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arb…
-
Unscored —CVE-2006-1040 Public exploit
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web …
-
Unscored —
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostic…
-
Unscored —CVE-2006-1031 Public exploit
config/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via t…
-
Unscored —
Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknow…
-
Unscored —
Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticat…
-
Unscored —
SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-1033 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject ar…
-
Unscored —
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attac…
-
Unscored —
Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface en…
-
Unscored —
Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certa…
-
Unscored —CVE-2006-1045 Public exploit
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled…
-
Unscored —
Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and …
-
Unscored —
Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, w…
-
Unscored —
The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack …
-
Unscored —
OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates…
-
Unscored —
Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endle…
-
Unscored —
Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Wi…
-
Unscored —CVE-2006-1022 Public exploit
PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System…
-
Unscored —
JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account …
-
Unscored —CVE-2006-1014 Public exploit
Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting re…
-
Unscored —
feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive info…
-
Unscored —
Directory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on Windows allows remote a…