Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
585 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-1224 Public exploit
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via…
-
Unscored —
Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users t…
-
Unscored —
Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary …
-
Unscored —CVE-2006-1215 Public exploit
Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to in…
-
Unscored —
Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a …
-
Unscored —CVE-2006-1219 Public exploit
Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to includ…
-
Unscored —CVE-2006-1216 Public exploit
Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web s…
-
Unscored —
SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid para…
-
Unscored —
The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password …
-
Unscored —
Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions be…
-
Unscored —
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP addr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject …
-
Unscored —CVE-2006-1213 Public exploit
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions …
-
Unscored —
Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating …
-
Unscored —CVE-2006-1199 Public exploit
Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrar…
-
Unscored —
Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arb…
-
Unscored —CVE-2006-1209 Public exploit
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web …
-
Unscored —CVE-2006-1202 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2006-1212 Public exploit
Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via…
-
Unscored —
PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to includ…
-
Unscored —CVE-2006-1205 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attacker…
-
Unscored —CVE-2006-1214 Public exploit
UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send m…
-
Unscored —
Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, fo…
-
Unscored —
Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name …
-
Unscored —
PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attac…
-
Unscored —CVE-2006-1196 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web scr…
-
Unscored —
SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to g…
-
Unscored —
The enet_protocol_handle_send_fragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as use…
-
Unscored —CVE-2006-1194 Public exploit
Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS vers…
-
Unscored —
gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned…
-
Unscored —
unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slas…
-
Unscored —
Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated user…
-
Unscored —CVE-2006-1183 Public exploit
The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the…
-
Unscored —
sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making cer…
-
Unscored —CVE-2006-1162 Public exploit
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP…
-
Unscored —CVE-2006-1164 Public exploit
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient ac…
-
Unscored —CVE-2006-1161 Public exploit
Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execu…