Skip to content
OpenAdvisories

Archive

29 March 2006

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough …

  • Unscored —
    CVE-2006-1491 Public exploit EPSS 39%

    Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remo…

  • Unscored —

    Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the che…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-1490 Public exploit EPSS 21%

    PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script…

  • Unscored —
    CVE-2006-1489 Public exploit

    Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to …

  • Unscored —
    CVE-2006-1486 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject…

  • Unscored —

    ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or…

  • Unscored —
    CVE-2006-1487 Public exploit

    Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-1999-1587 Public exploit

    /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environme…

  • Unscored —

    Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by op…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to i…

  • Unscored —

    Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live …

  • Unscored —

    gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary program…

  • Unscored —

    Blazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the source code of JSP files…

  • Unscored —
    CVE-2006-1480 Public exploit

    Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and …

  • Unscored —

    Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename …

  • Unscored —

    Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote …

  • Unscored —
    CVE-2006-1481 Public exploit

    SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote att…

  • Unscored —
    CVE-2006-1482 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web s…