Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
585 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbit…
-
Unscored —
M4 Project enigma-suite before 0.73.3 (Windows) has a default password of "nominal" for the "enigma-client" account, wh…
-
Unscored —
Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inj…
-
Unscored —
agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering…
-
Unscored —
The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, w…
-
Unscored —CVE-2006-1007 Public exploit
Multiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
NETGEAR WGT624 Wireless DSL router has a default account of super_username "Gearguy" and super_passwd "Geardog", which …
-
Unscored —CVE-2006-1000 Public exploit
Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbit…
-
Unscored —CVE-2006-1001 Public exploit
SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote…
-
Unscored —CVE-2006-1008 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web…
-
Unscored —
Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows use…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote atta…
-
Unscored —
Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files a…
-
Unscored —
FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, whic…
-
Unscored —
EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote a…
-
Unscored —
Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact an…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arb…
-
Unscored —CVE-2006-0983 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-0976 Public exploit
Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers t…
-
Unscored —CVE-2006-0971 Public exploit
Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files v…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier …
-
Unscored —
The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queri…
-
Unscored —CVE-2006-0984 Public exploit
Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitr…
-
Unscored —CVE-2006-0973 Public exploit
SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote a…
-
Unscored —
Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail…
-
Unscored —CVE-2006-0974 Public exploit
Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arb…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mai…
-
Unscored —CVE-2006-0972 Public exploit
SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary…
-
Unscored —
The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious cont…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allo…
-
Unscored —
WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default…
-
Unscored —
The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Serv…
-
Unscored —
Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers…
-
Unscored —
The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows loc…
-
Unscored —
uConfig agent in Compex NetPassage WPE54G router allows remote attackers to cause a denial of service (unresposiveness)…
-
Unscored —CVE-2006-0962 Public exploit
SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass paramete…
-
Unscored —
Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale enviro…
-
Unscored —
NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a deni…