Skip to content
OpenAdvisories

Archive

March 2006

Vulnerabilities first published in this month (UTC), newest first.

← February 2006 2006 / March April 2006 →
  1. 110
  2. 221
  3. 324
  4. 4 
  5. 5 
  6. 618
  7. 752
  8. 84
  9. 958
  10. 1029
  11. 11 
  12. 1213
  13. 1310
  14. 1450
  15. 1512
  16. 161
  17. 173
  18. 18 
  19. 1963
  20. 205
  21. 2122
  22. 2219
  23. 2323
  24. 2420
  25. 253
  26. 267
  27. 271
  28. 2842
  29. 2922
  30. 3037
  31. 3116
All Critical High Medium Low Exploited only Public exploit

195 results · Clear filters · Feed

  • Unscored —
    CVE-2006-1556 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers …

  • Unscored —
    CVE-2006-1557 Public exploit

    Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-1540 Public exploit EPSS 29%

    MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of…

  • Unscored —
    CVE-2006-1543 Public exploit

    Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-1536 Public exploit

    Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to exe…

  • Unscored —
    CVE-2006-1535 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote …

  • Unscored —
    CVE-2006-1542 Public exploit

    Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, all…

  • Unscored —
    CVE-2006-1504 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal or ADP) stable allow re…

  • Unscored —
    CVE-2006-1510 Public exploit EPSS 14%

    Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassemb…

  • Unscored —
    CVE-2006-1508 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlie…

  • Unscored —
    CVE-2006-1497 Public exploit

    Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the …

  • Unscored —
    CVE-2006-1501 Public exploit

    SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2006-1496 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-1495 Public exploit

    SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 a…

  • Unscored —
    CVE-2006-1491 Public exploit EPSS 39%

    Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remo…

  • Unscored —
    CVE-2006-1490 Public exploit EPSS 21%

    PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script…

  • Unscored —
    CVE-2006-1489 Public exploit

    Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to …

  • Unscored —
    CVE-2006-1486 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject…

  • Unscored —
    CVE-2006-1487 Public exploit

    Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-1999-1587 Public exploit

    /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environme…

  • Unscored —
    CVE-2006-1480 Public exploit

    Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and …

  • Unscored —
    CVE-2006-1481 Public exploit

    SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL…

  • Unscored —
    CVE-2006-1482 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-1431 Public exploit

    Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-1430 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote at…

  • Unscored —
    CVE-2006-1429 Public exploit

    Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-1425 Public exploit

    Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-1419 Public exploit

    SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-1417 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly…

  • Unscored —
    CVE-2006-1418 Public exploit

    Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier …

  • Unscored —
    CVE-2006-1420 Public exploit

    SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-1422 Public exploit

    SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-1414 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers…

  • Unscored —
    CVE-2006-1426 Public exploit

    Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-1427 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject ar…

  • Unscored —
    CVE-2006-1428 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-1413 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject a…

  • Unscored —
    CVE-2006-1407 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote a…

  • Unscored —
    CVE-2006-1404 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inj…

  • Unscored —
    CVE-2006-1412 Public exploit

    TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote …