Skip to content
OpenAdvisories

Archive

March 2006

Vulnerabilities first published in this month (UTC), newest first.

← February 2006 2006 / March April 2006 →
  1. 110
  2. 221
  3. 324
  4. 4 
  5. 5 
  6. 618
  7. 752
  8. 84
  9. 958
  10. 1029
  11. 11 
  12. 1213
  13. 1310
  14. 1450
  15. 1512
  16. 161
  17. 173
  18. 18 
  19. 1963
  20. 205
  21. 2122
  22. 2219
  23. 2323
  24. 2420
  25. 253
  26. 267
  27. 271
  28. 2842
  29. 2922
  30. 3037
  31. 3116
All Critical High Medium Low Exploited only Public exploit

585 results · Feed

  • Unscored —
    CVE-2006-1166

    Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a …

  • Unscored —
    CVE-2006-1159 Public exploit

    Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2006-1163

    Cross-site scripting (XSS) vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2006-1165

    Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attacke…

    dokuwiki Debian
  • Unscored —
    CVE-2006-1160

    Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-1156

    SQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to exe…

  • Unscored —
    CVE-2006-1157 Public exploit

    Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-1155

    Cross-site scripting (XSS) vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote att…

  • Unscored —
    CVE-2006-1158

    Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service (application crash) via a cr…

  • Unscored —
    CVE-2006-1154

    PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbit…

  • Unscored —
    CVE-2006-1149 Public exploit

    PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enable…

  • Unscored —
    CVE-2006-1153 Public exploit

    SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load p…

  • Unscored —
    CVE-2006-1145 Public exploit

    Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows …

  • Unscored —
    CVE-2006-1150

    Buffer overflow in Tenes Empanadas Graciela (TEG) 0.11.1, automatically appends an _ (underscore) to the end of duplica…

    teg Debian
  • Unscored —
    CVE-2006-1142

    Unspecified vulnerability in Ravenous Web Server before 0.7.1 allows remote attackers to access arbitrary rvplg files, …

  • Unscored —
    CVE-2006-1144 Public exploit

    Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2006-1147 Public exploit

    The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain l…

  • Unscored —
    CVE-2006-1146 Public exploit

    Stack-based buffer overflow in the Cmd_Say_f function in g_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote a…

  • Unscored —
    CVE-2006-1152

    PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files…

  • Unscored —
    CVE-2006-1140 Public exploit

    SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2006-1143

    Cross-site scripting (XSS) vulnerability in FTPoed Blog Engine 1.1 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-1141

    Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a lon…

  • Unscored —
    CVE-2006-1148 Public exploit EPSS 73%

    Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow re…

  • Unscored —
    CVE-2006-1151 Public exploit

    Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2006-1139

    Unspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre Pro, running software…

  • Unscored —
    CVE-2006-1134

    SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows remote attackers to ex…

  • Unscored —
    CVE-2006-1132 Public exploit

    SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2006-1131 Public exploit

    Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2006-1136

    Buffer overflow in the PostScript file interpreter code for Xerox CopyCentre and Xerox WorkCentre Pro, running software…

  • Unscored —
    CVE-2006-1137

    Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or ear…

  • Unscored —
    CVE-2006-1129

    SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-1133 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-1130

    Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2006-1138

    Unspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.0…

  • Unscored —
    CVE-2006-1135 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2005-4729

    SQL injection vulnerability in show.php in VBZooM Forum allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-0040

    GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) v…

    evolution Debian
  • Unscored —
    CVE-2006-0667

    lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack.

  • Unscored —
    CVE-2006-1128 Public exploit

    Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows …

  • Unscored —
    CVE-2006-1126

    Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR…