Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
585 results · Feed
-
Unscored —
Untrusted search path vulnerability (RPATH) in amaya 9.2.1 on Debian GNU/Linux allows local users to gain privileges vi…
-
Unscored —
Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3627, which a…
-
Unscored —
PHP-Stats 0.1.9.1 and earlier allows remote attackers to obtain potentially sensitive information via a direct request …
-
Unscored —
Jason Boettcher Liero Xtreme 0.62b and earlier allow remote attackers to cause a denial of service (application crash o…
-
Unscored —CVE-2006-1076 Public exploit
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 al…
-
Unscored —
htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain priv…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inje…
-
Unscored —CVE-2006-1080 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject…
-
Unscored —
Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier a…
-
Unscored —
admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privile…
-
Unscored —
Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remo…
-
High 8.4
Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might …
-
Unscored —
Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to read and possib…
-
Unscored —CVE-2006-1081 Public exploit
SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers …
-
Unscored —CVE-2006-1070 Public exploit
Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-1071 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-1073 Public exploit
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitr…
-
Unscored —
Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 bef…
-
Unscored —
SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary S…
-
Unscored —
Linksys WRT54G routers version 5 (running VXWorks) allow remote attackers to cause a denial of service by sending a mal…
-
Unscored —
Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrar…
-
Unscored —
Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writabl…
-
Unscored —
SQL injection vulnerability in Akarru Social BookMarking Engine before 0.4.3.4 allows remote attackers to execute arbit…
-
Unscored —
Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown…
-
Unscored —
initscripts in Red Hat Enterprise Linux 4 does not properly handle certain environment variables when /sbin/service is …
-
Unscored —
Kwik-Pay Payroll 4.2.20, and possibly other versions, stores the KwikPay.mdb database file with insecure permissions, w…
-
Unscored —CVE-2006-0047 Public exploit
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted p…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-1039 Public exploit
SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP re…
-
Unscored —
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack ve…
-
Unscored —CVE-2006-1032 Public exploit
Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, e…
-
Unscored —CVE-2006-1046 Public exploit
server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a stri…
-
Unscored —CVE-2006-1034 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arb…
-
Unscored —CVE-2006-1040 Public exploit
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web …
-
Unscored —
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostic…
-
Unscored —CVE-2006-1031 Public exploit
config/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via t…