Skip to content
OpenAdvisories

Archive

24 March 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —
    CVE-2006-1388 Public exploit EPSS 55%

    Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown v…

  • Unscored —

    Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack …

  • Unscored —

    Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JS…

  • Unscored —

    Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which…

  • Unscored —

    ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions …

  • Unscored —
    CVE-2006-1384 Public exploit

    Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager…

  • Unscored —

    Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine exis…

  • Unscored —

    Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote a…

  • Unscored —

    PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is…

  • Unscored —

    Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allow…

  • Unscored —

    Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote…

  • Unscored —

    Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a deni…

  • Unscored —
    CVE-2006-1377 Public exploit

    Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attacker…

  • Unscored —

    PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) durin…

  • Unscored —
    CVE-2006-1372 Public exploit

    Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitra…

  • Unscored —

    The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with …

  • Unscored —

    AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to …

  • Unscored —
    CVE-2006-1374 Public exploit

    SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute a…

  • Unscored —

    ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, a…