Skip to content
OpenAdvisories

Archive

19 March 2006

Vulnerabilities first published on this day (UTC), newest first.

63 results · Feed

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-1269 Public exploit

    Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arb…

  • Unscored —

    Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by ob…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Service_Requests.asp in VPMi Enterprise 3.3 allows remote attackers to inje…

  • Unscored —
    CVE-2006-1271 Public exploit

    SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the o…

  • Unscored —

    The Internet Key Exchange implementation in Funkwerk X2300 7.2.1 allows remote attackers to cause a denial of service a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attacke…

  • Unscored —

    Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to i…

  • Unscored —

    SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execut…

  • Unscored —

    Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors.

  • Unscored —

    Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vect…

  • Unscored —
    CVE-2006-1258 Public exploit

    Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script o…

  • Unscored —

    Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execut…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remo…

  • Unscored —
    CVE-2006-1252 Public exploit

    Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-1255 Public exploit EPSS 69%

    Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to caus…

  • Unscored —

    Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostn…

  • Unscored —

    Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unkno…

  • Unscored —
    CVE-2006-1257 EPSS 30%

    The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypa…

  • Unscored —

    Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files…