Skip to content
OpenAdvisories

Archive

13 March 2006

Vulnerabilities first published on this day (UTC), newest first.

10 results · Feed

  • Unscored —
    CVE-2006-1196 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scr…

  • Unscored —

    SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to g…

  • Unscored —

    The enet_protocol_handle_send_fragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as use…

  • Unscored —
    CVE-2006-1194 Public exploit

    Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS vers…

  • Unscored —

    gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned…

  • Unscored —

    unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web scr…

  • Unscored —

    Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slas…

  • Unscored —

    Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated user…

  • Unscored —
    CVE-2006-1183 Public exploit

    The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the…