Skip to content
OpenAdvisories

Archive

9 March 2006

Vulnerabilities first published on this day (UTC), newest first.

58 results · Feed

  • Unscored —
    CVE-2006-1102 Public exploit

    Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client e…

  • Unscored —
    CVE-2006-1114 Public exploit

    Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrar…

  • Unscored —

    Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges vi…

  • Unscored —

    Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which a…

  • Unscored —

    PHP-Stats 0.1.9.1 and earlier allows remote attackers to obtain potentially sensitive information via a direct request …

  • Unscored —

    Jason Boettcher Liero Xtreme 0.62b and earlier allow remote attackers to cause a denial of service (application crash o…

  • Unscored —
    CVE-2006-1076 Public exploit

    SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 al…

  • Unscored —

    htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain priv…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inje…

  • Unscored —
    CVE-2006-1080 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject…

  • Unscored —

    Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier a…

  • Unscored —

    admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privile…

  • Unscored —

    Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remo…

  • High 8.4

    Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might …

  • Unscored —

    Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —

    Multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to read and possib…

  • Unscored —
    CVE-2006-1081 Public exploit

    SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers …