Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
195 results · Clear filters · Feed
-
Unscored —CVE-2006-1395 Public exploit
SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary …
-
Unscored —
Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown v…
-
Unscored —CVE-2006-1384 Public exploit
Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager…
-
Unscored —CVE-2006-1377 Public exploit
Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attacker…
-
Unscored —CVE-2006-1372 Public exploit
Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-1374 Public exploit
SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute a…
-
Unscored —
Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Play…
-
Unscored —CVE-2006-1371 Public exploit
Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea Fi…
-
Unscored —CVE-2006-1367 Public exploit
The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones d…
-
Unscored —CVE-2006-1363 Public exploit
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbit…
-
Unscored —
Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM co…
-
Unscored —
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute ar…
-
Unscored —
Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by tri…
-
Unscored —CVE-2006-1356 Public exploit
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to…
-
Unscored —CVE-2006-1357 Public exploit
Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers t…
-
Unscored —CVE-2006-1353 Public exploit
Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-1349 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-1348 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacke…
-
Unscored —CVE-2006-1344 Public exploit
Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attack…
-
Unscored —CVE-2006-1346 Public exploit
Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attacker…
-
Unscored —CVE-2006-1347 Public exploit
SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to…
-
Unscored —CVE-2006-1342 Public exploit
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the …
-
Unscored —CVE-2006-0745 Public exploit
X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid func…
-
Unscored —CVE-2006-1336 Public exploit
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows rem…
-
Unscored —CVE-2006-1326 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbi…
-
Unscored —CVE-2006-1330 Public exploit
Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-1334 Public exploit
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2006-1324 Public exploit
Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remo…
-
Unscored —CVE-2006-1327 Public exploit
SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2006-1333 Public exploit
Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-1323 Public exploit
Directory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to overwrite arbitrary files…
-
Unscored —CVE-2006-1292 Public exploit
Directory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows remote attackers to i…
-
Unscored —CVE-2006-1291 Public exploit
publish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require authentication for write acc…
-
Unscored —
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.…
-
Unscored —CVE-2006-1275 Public exploit
GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce…
-
Unscored —CVE-2006-1278 Public exploit
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url param…
-
Unscored —CVE-2006-1269 Public exploit
Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long…
-
Unscored —CVE-2006-1271 Public exploit
SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the o…
-
Unscored —CVE-2006-1258 Public exploit
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script o…