Skip to content
OpenAdvisories

Archive

21 March 2006

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3prot…

  • Unscored —
    CVE-2006-1342 Public exploit

    net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the …

  • Unscored —
    CVE-2006-0745 Public exploit

    X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid func…

  • Unscored —

    Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to ca…

  • Unscored —
    CVE-2006-1336 Public exploit

    Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows rem…

  • Unscored —

    Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.7…

  • Unscored —

    Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register…

  • Unscored —

    SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vect…

  • Unscored —

    Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list paramete…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Streber 0.055 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2006-1326 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2006-1330 Public exploit

    Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —

    gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, a…

  • Unscored —
    CVE-2006-1334 Public exploit

    Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-1324 Public exploit

    Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remo…

  • Unscored —

    SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attacke…

  • Unscored —

    Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2006-1327 Public exploit

    SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote att…

  • Unscored —
    CVE-2006-1333 Public exploit

    Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary…

  • Unscored —

    The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s …