Archive
29 March 2006
Vulnerabilities first published on this day (UTC), newest first.
22 results · Feed
-
Unscored —
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough …
-
Unscored —
Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remo…
-
Unscored —
Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the che…
-
Unscored —
Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web scri…
-
Unscored —
PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script…
-
Unscored —CVE-2006-1489 Public exploit
Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to …
-
Unscored —CVE-2006-1486 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject…
-
Unscored —
ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or…
-
Unscored —CVE-2006-1487 Public exploit
Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitra…
-
Unscored —CVE-1999-1587 Public exploit
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environme…
-
Unscored —
Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by op…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to i…
-
Unscored —
Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live …
-
Unscored —
gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary program…
-
Unscored —
Blazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the source code of JSP files…
-
Unscored —CVE-2006-1480 Public exploit
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and …
-
Unscored —
Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename …
-
Unscored —
Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote …
-
Unscored —CVE-2006-1481 Public exploit
SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote att…
-
Unscored —CVE-2006-1482 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web s…