Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
195 results · Clear filters · Feed
-
Unscored —CVE-2006-1252 Public exploit
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary…
-
Unscored —
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to caus…
-
Unscored —
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote …
-
Unscored —CVE-2006-1243 Public exploit
Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers…
-
Unscored —CVE-2006-1240 Public exploit
Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to …
-
Unscored —CVE-2006-1238 Public exploit
SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrar…
-
Unscored —
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitra…
-
Unscored —
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, all…
-
Unscored —CVE-2006-1232 Public exploit
Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to exe…
-
Unscored —CVE-2006-1234 Public exploit
SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to e…
-
Unscored —CVE-2006-1230 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitra…
-
Unscored —CVE-2006-1233 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or …
-
Unscored —
Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote …
-
Unscored —CVE-2006-1223 Public exploit
Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject…
-
Unscored —CVE-2006-1224 Public exploit
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via…
-
Unscored —CVE-2006-1215 Public exploit
Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to in…
-
Unscored —CVE-2006-1219 Public exploit
Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to includ…
-
Unscored —CVE-2006-1216 Public exploit
Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-1213 Public exploit
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions …
-
Unscored —
Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating …
-
Unscored —CVE-2006-1199 Public exploit
Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-1209 Public exploit
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web …
-
Unscored —CVE-2006-1202 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2006-1212 Public exploit
Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via…
-
Unscored —CVE-2006-1205 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attacker…
-
Unscored —CVE-2006-1214 Public exploit
UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send m…
-
Unscored —CVE-2006-1196 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-1194 Public exploit
Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS vers…
-
Unscored —CVE-2006-1183 Public exploit
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the…
-
Unscored —CVE-2006-1162 Public exploit
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP…
-
Unscored —CVE-2006-1164 Public exploit
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient ac…
-
Unscored —CVE-2006-1161 Public exploit
Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execu…
-
Unscored —CVE-2006-1159 Public exploit
Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2006-1157 Public exploit
Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject ar…
-
Unscored —CVE-2006-1149 Public exploit
PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enable…
-
Unscored —CVE-2006-1153 Public exploit
SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load p…
-
Unscored —CVE-2006-1145 Public exploit
Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows …
-
Unscored —CVE-2006-1144 Public exploit
Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2006-1147 Public exploit
The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain l…
-
Unscored —CVE-2006-1146 Public exploit
Stack-based buffer overflow in the Cmd_Say_f function in g_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote a…