Skip to content
OpenAdvisories

Archive

March 2006

Vulnerabilities first published in this month (UTC), newest first.

585 results · Feed

  • Unscored —

    NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a deni…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers t…

  • Unscored —

    NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass secur…

  • Unscored —
    CVE-2006-0959 Public exploit

    SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote…

  • Unscored —

    nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to …

  • Unscored —

    Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local us…

  • Unscored —
    CVE-2006-0961 Public exploit

    SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service …

  • Unscored —

    automount in Mac OS X 10.4.5 and earlier allows remote file servers to cause a denial of service (unresponsiveness) or …

  • Unscored —

    Heap-based buffer overflow in LibSystem in Mac OS X 10.4 through 10.4.5 allows context-dependent attackers to execute a…

  • Unscored —

    Heap-based buffer overflow in rsync in Mac OS X 10.4 through 10.4.5 allows remote authenticated users to execute arbitr…

  • Unscored —
    CVE-2005-2713 Public exploit

    passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arb…

  • Unscored —

    passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite …

  • Unscored —

    The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain so…

  • Unscored —

    Multiple integer overflows in the 32bit emulation for AMD64 architectures in Linux 2.4 kernel before 2.4.21 allows atta…

  • Unscored —
    CVE-2006-0939 Public exploit

    SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) i…

  • Unscored —
    CVE-2006-0943 Public exploit

    SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-0944 Public exploit

    Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

  • Unscored —
    CVE-2006-0942 Public exploit

    SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to ex…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-0947 Public exploit

    Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via …

  • Unscored —
    CVE-2006-0940 Public exploit

    Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to …

  • Unscored —
    CVE-2006-0946 Public exploit

    Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attacker…

  • Unscored —

    PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated admini…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary we…