Archive
April 2006
Vulnerabilities first published in this month (UTC), newest first.
632 results · Feed
-
Unscored —
Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remot…
-
Unscored —CVE-2006-2107 Public exploit
Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or ex…
-
Unscored —
Unspecified vulnerability in HP StorageWorks Secure Path for Windows 4.0C-SP2 before 20060419 allows remote attackers t…
-
Unscored —CVE-2006-2102 Public exploit
Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) i…
-
Unscored —
Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumpt…
-
Unscored —
The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a denial of service (applicat…
-
Unscored —
Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10 Build 4460, and SpeedComm…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow remote attackers to inject…
-
Unscored —
Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Jun…
-
Unscored —CVE-2006-2097 Public exploit
SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbi…
-
Unscored —CVE-2006-2108 Public exploit
parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a …
-
Unscored —
admin.php in Virtual War (VWar) 1.5 and versions before 1.2 allows remote attackers to obtain sensitive information via…
-
Unscored —
Phex before 2.8.6 allows remote attackers to cause a denial of service (application hang) by initiating multiple chat r…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and earlier allow remote attac…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers…
-
Unscored —
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary…
-
Unscored —CVE-2006-2101 Public exploit
Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. (dot dot) in …
-
Unscored —
Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to execute arbitrary SQL c…
-
Unscored —
plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive information via an invali…
-
Unscored —
SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows remote authenticated administrators to execute arbit…
-
Unscored —CVE-2006-2099 Public exploit
Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. (dot…
-
Unscored —
PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers to execute arbitrary …
-
Unscored —
Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is con…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject …
-
Unscored —CVE-2006-2100 Public exploit
Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a ..…
-
Unscored —CVE-2006-2089 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arb…
-
Unscored —CVE-2005-4792 Public exploit
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote at…
-
Unscored —
Multiple unspecified vulnerabilities in the web utility function in Hitachi Cm2/Network Node Manager and JP1/Cm2/Networ…
-
Unscored —
Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might …
-
Unscored —
Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion)…
-
Unscored —
Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via …
-
Unscored —
The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compre…
-
Unscored —
The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS pa…
-
Unscored —
The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compre…
-
Unscored —
SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote att…
-
Unscored —CVE-2006-2079 Public exploit
Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2…
-
Unscored —
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METAD…
-
Unscored —
Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message wi…
-
Unscored —
Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via a crafted DNS message…
-
Unscored —
Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack…