Skip to content
OpenAdvisories

Archive

22 March 2006

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —
    CVE-2006-0058 Public exploit EPSS 29%

    Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by tri…

  • Unscored —

    Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization soluti…

  • Unscored —

    The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not corr…

  • Unscored —

    util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a …

  • Unscored —
    CVE-2006-1356 Public exploit

    Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to…

  • Unscored —

    Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a d…

  • Unscored —
    CVE-2006-1357 Public exploit

    Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers t…

  • Unscored —
    CVE-2006-1353 Public exploit

    Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —

    avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation f…

  • Unscored —

    Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache …

  • Unscored —
    CVE-2006-1349 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary w…

  • Unscored —

    BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors rela…

  • Unscored —
    CVE-2006-1348 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacke…

  • Unscored —
    CVE-2006-1344 Public exploit

    Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attack…

  • Unscored —
    CVE-2006-1346 Public exploit

    Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacker…

  • Unscored —

    polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action …

  • Unscored —
    CVE-2006-1347 Public exploit

    SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to…

  • Unscored —

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earl…

  • Unscored —

    PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allo…