Archive
24 March 2006
Vulnerabilities first published on this day (UTC), newest first.
20 results · Feed
-
Unscored —
Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown v…
-
Unscored —
Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack …
-
Unscored —
Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JS…
-
Unscored —
Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which…
-
Unscored —
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions …
-
Unscored —CVE-2006-1384 Public exploit
Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager…
-
Unscored —
Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine exis…
-
Unscored —
Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote a…
-
Unscored —
PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is…
-
Unscored —
Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allow…
-
Unscored —
Directory traversal vulnerability in Baby FTP Server 1.2, and possibly other versions before May 31, 2003 allows remote…
-
Unscored —
Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a deni…
-
Unscored —CVE-2006-1377 Public exploit
Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attacker…
-
Unscored —
PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) durin…
-
Unscored —CVE-2006-1372 Public exploit
Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —
Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitra…
-
Unscored —
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with …
-
Unscored —
AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to …
-
Unscored —CVE-2006-1374 Public exploit
SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute a…
-
Unscored —
ISS BlackIce 3.6, as used in multiple products including BlackICE PC Protection, Server Protection, Agent for Server, a…