Skip to content
OpenAdvisories

Archive

9 March 2006

Vulnerabilities first published on this day (UTC), newest first.

← February 2006 2006 / March /9 April 2006 →
  1. 110
  2. 221
  3. 324
  4. 4 
  5. 5 
  6. 618
  7. 752
  8. 84
  9. 958
  10. 1029
  11. 11 
  12. 1213
  13. 1310
  14. 1450
  15. 1512
  16. 161
  17. 173
  18. 18 
  19. 1963
  20. 205
  21. 2122
  22. 2219
  23. 2323
  24. 2420
  25. 253
  26. 267
  27. 271
  28. 2842
  29. 2922
  30. 3037
  31. 3116
All Critical High Medium Low Exploited only Public exploit

58 results · Feed

  • Unscored —
    CVE-2006-1128 Public exploit

    Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows …

  • Unscored —
    CVE-2006-1126

    Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR…

  • Unscored —
    CVE-2006-1127 Public exploit

    Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-1123 Public exploit

    SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-1122

    Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject …

  • Unscored —
    CVE-2006-1121 Public exploit

    Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2006-1125

    Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update f…

  • Unscored —
    CVE-2006-1120 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, all…

  • Unscored —
    CVE-2006-1124 Public exploit

    Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER…

  • Medium —
    CVE-2006-0743

    Apache log4net format string vulnerability causes DoS

    Format string vulnerability in LocalSyslogAppender in Apache log4net 1.2.9 might allow remote attackers to cause a denial of service (memory corruption and termination) via unknown vectors.

    log4net NuGet
  • Unscored —
    CVE-2006-1119

    fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, …

  • Unscored —
    CVE-2006-0742

    The die_if_kernel function in arch/ia64/kernel/unaligned.c in Linux kernel 2.6.x before 2.6.15.6, possibly when compile…

  • Unscored —
    CVE-2006-1115

    nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGr…

  • Unscored —
    CVE-2006-1100 Public exploit

    Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cub…

  • Unscored —
    CVE-2006-1097

    Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow re…

  • Unscored —
    CVE-2006-1107

    Cross-site scripting (XSS) vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-1111 Public exploit

    Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, …

  • Unscored —
    CVE-2006-1095

    Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to…

  • Unscored —
    CVE-2006-1116

    The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a…

  • Unscored —
    CVE-2006-1117

    nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Do…

  • Unscored —
    CVE-2006-1118

    SQL injection vulnerability in bmail before Aardvark PR9.1 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-1099 Public exploit

    PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a …

  • Unscored —
    CVE-2006-1106

    Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-1098 Public exploit

    Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2006-1101 Public exploit

    The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attac…

  • Unscored —
    CVE-2006-1092

    Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 through 10 allows l…

  • Unscored —
    CVE-2006-1103 Public exploit

    engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial…

  • Unscored —
    CVE-2006-1109 Public exploit

    SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-1089

    Cross-site scripting (XSS) vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-1110 Public exploit

    Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2006-1091

    Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) v…

  • Unscored —
    CVE-2006-1094 Public exploit

    SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execu…

  • Unscored —
    CVE-2006-1104

    Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-1113 Public exploit

    SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-1108

    SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-1093

    Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attacker…

  • Unscored —
    CVE-2006-1096

    Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-1090 Public exploit

    register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user …

  • Unscored —
    CVE-2006-1112 Public exploit

    Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, whic…

  • Unscored —
    CVE-2006-1105

    Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to in…