Skip to content
OpenAdvisories

Archive

March 2006

Vulnerabilities first published in this month (UTC), newest first.

← February 2006 2006 / March April 2006 →
  1. 110
  2. 221
  3. 324
  4. 4 
  5. 5 
  6. 618
  7. 752
  8. 84
  9. 958
  10. 1029
  11. 11 
  12. 1213
  13. 1310
  14. 1450
  15. 1512
  16. 161
  17. 173
  18. 18 
  19. 1963
  20. 205
  21. 2122
  22. 2219
  23. 2323
  24. 2420
  25. 253
  26. 267
  27. 271
  28. 2842
  29. 2922
  30. 3037
  31. 3116
All Critical High Medium Low Exploited only Public exploit

585 results · Feed

  • Unscored —
    CVE-2006-1038

    Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknow…

  • Unscored —
    CVE-2006-1049

    Multiple SQL injection vulnerabilities in the Admin functionality in Joomla! 1.0.7 and earlier allow remote authenticat…

  • Unscored —
    CVE-2006-1037

    SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-1033 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject ar…

  • Unscored —
    CVE-2006-1043 Public exploit EPSS 23%

    Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attac…

  • Unscored —
    CVE-2006-1044

    Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface en…

  • Unscored —
    CVE-2006-1042

    Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-1048

    Joomla! 1.0.7 and earlier allows attackers to bypass intended access restrictions and gain certain privileges via certa…

  • Unscored —
    CVE-2006-1045 Public exploit

    The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled…

    thunderbird Debian
  • Unscored —
    CVE-2006-1047

    Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and …

  • Unscored —
    CVE-2006-0554

    Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, w…

  • Unscored —
    CVE-2006-0555

    The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack …

  • Unscored —
    CVE-2006-0883

    OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates…

    openssh Debian
  • Unscored —
    CVE-2006-0741

    Linux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a denial of service ("endle…

  • Unscored —
    CVE-2006-1016 Public exploit EPSS 67%

    Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Wi…

  • Unscored —
    CVE-2006-1022 Public exploit

    PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System…

  • Unscored —
    CVE-2006-1026

    JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account …

  • Unscored —
    CVE-2006-1014 Public exploit

    Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting re…

  • Unscored —
    CVE-2006-1027

    feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive info…

  • Unscored —
    CVE-2006-1023

    Directory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on Windows allows remote a…

  • Unscored —
    CVE-2006-1017

    The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2…

  • Unscored —
    CVE-2006-1025

    Cross-site scripting (XSS) vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inj…

  • Unscored —
    CVE-2006-1013 Public exploit

    PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and…

  • Unscored —
    CVE-2006-1030

    Unspecified vulnerability in mod_templatechooser in Joomla! 1.0.7 allows remote attackers to obtain sensitive informati…

  • Unscored —
    CVE-2006-1020

    SQL injection vulnerability in forumlib.php in Johnny_Vegas Vegas Forum 1.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-1029

    The cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to caus…

  • Unscored —
    CVE-2006-1019

    Cross-site scripting (XSS) vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-1028

    feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2006-1015 Public exploit EPSS 12%

    Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accept…

  • Unscored —
    CVE-2006-1021 Public exploit

    Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management Sys…

  • Unscored —
    CVE-2006-1018 Public exploit

    SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-1024

    SQL injection vulnerability in MgrLogin.asp in Addsoft StoreBot 2005 Professional allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-0458

    The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and possibly other distribut…

  • Unscored —
    CVE-2006-0815

    NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" (forward…

  • Unscored —
    CVE-2006-0814 EPSS 11%

    response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbi…

  • Unscored —
    CVE-2006-0949

    RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests i…

  • Unscored —
    CVE-2006-1011

    LetterMerger 1.2 stores user information in Access database files with insecure permissions, which allows local users t…

  • Unscored —
    CVE-2006-1012

    SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to exec…

    wordpress Debian
  • Unscored —
    CVE-2006-1010 Public exploit EPSS 18%

    Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers t…

    crossfire Debian
  • Unscored —
    CVE-2006-0387

    Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers t…