Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
585 results · Feed
-
Unscored —
/sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully from some error condit…
-
Unscored —
Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine 5.3 before 20060327 and N1 Grid Engine 6.0 before …
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2006-1508 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlie…
-
Unscored —
PHP remote file include vulnerability in functions_admin.php in Virtual War (VWar) 1.5.0 R10 allows remote attackers to…
-
Unscored —CVE-2006-1497 Public exploit
Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the …
-
Unscored —CVE-2006-1501 Public exploit
SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-…
-
Unscored —CVE-2006-1496 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbit…
-
Unscored —CVE-2006-1495 Public exploit
SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 a…
-
Unscored —
SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitra…
-
Unscored —
SQL injection vulnerability in index.php in Tilde CMS 3.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough …
-
Unscored —
Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remo…
-
Unscored —
Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the che…
-
Unscored —
Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web scri…
-
Unscored —
PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script…
-
Unscored —CVE-2006-1489 Public exploit
Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to …
-
Unscored —CVE-2006-1486 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject…
-
Unscored —
ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or…
-
Unscored —CVE-2006-1487 Public exploit
Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitra…
-
Unscored —CVE-1999-1587 Public exploit
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environme…
-
Unscored —
Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by op…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to i…
-
Unscored —
Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live …
-
Unscored —
gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary program…
-
Unscored —
Blazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the source code of JSP files…
-
Unscored —CVE-2006-1480 Public exploit
Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and …
-
Unscored —
Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename …
-
Unscored —
Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote …
-
Unscored —CVE-2006-1481 Public exploit
SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote att…
-
Unscored —CVE-2006-1482 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-1431 Public exploit
Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject ar…
-
Unscored —
fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive inform…
-
Unscored —CVE-2006-1430 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote a…
-
Unscored —CVE-2006-1429 Public exploit
Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers …