Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
585 results · Feed
-
Unscored —
NetBSD 1.6, NetBSD 2.0 through 2.1, and NetBSD-current before 20051031 allows local users to gain privileges by attachi…
-
Unscored —
IBM DB2 Universal Database (UDB) 810 before ESE AIX 5765F4100 does not ensure that a user has execute privileges before…
-
Unscored —
Stack-based buffer overflow in IISWebAgentIF.dll in RSA Authentication Agent for Web (aka SecurID Web Agent) 5.2 and 5.…
-
Unscored —
Unspecified vulnerability in Echelog 0.6.2 allows attackers to "exploit function stacks on some architectures," with un…
-
Unscored —
Easy File Sharing (EFS) Web Server 1.2 allows remote authenticated users to cause a denial of service via (1) an "empty…
-
Unscored —
Easy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka options.ini) file and (2) log directory under the…
-
Unscored —CVE-2006-1275 Public exploit
GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce…
-
Unscored —CVE-2006-1278 Public exploit
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
CGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver::File and (2) Driver::db_f…
-
Unscored —
CGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on temporary files used by (1)…
-
Unscored —
Mozilla Firefox 1.0.7 and 1.5.0.1 allows remote attackers to cause a denial of service (crash) via an HTML tag with a l…
-
Unscored —
Cross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to inject…
-
Unscored —
Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which …
-
Unscored —
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by settin…
-
Unscored —
Cross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote attackers to inject ar…
-
Unscored —
CRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to conduct cros…
-
Unscored —
Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url param…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-1269 Public exploit
Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote attackers to inject arb…
-
Unscored —
Invision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain administrative privileges by ob…
-
Unscored —
Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Service_Requests.asp in VPMi Enterprise 3.3 allows remote attackers to inje…
-
Unscored —CVE-2006-1271 Public exploit
SQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary SQL commands via the o…
-
Unscored —
The Internet Key Exchange implementation in Funkwerk X2300 7.2.1 allows remote attackers to cause a denial of service a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0.3 allow remote attacke…
-
Unscored —
Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to i…
-
Unscored —
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execut…
-
Unscored —
Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors.
-
Unscored —
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vect…
-
Unscored —CVE-2006-1258 Public exploit
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script o…
-
Unscored —
Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remo…
-
Unscored —CVE-2006-1252 Public exploit
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary…
-
Unscored —
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to caus…
-
Unscored —
Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostn…
-
Unscored —
Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unkno…
-
Unscored —CVE-2006-1257 EPSS 30%
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypa…
-
Unscored —
Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files…