Skip to content
OpenAdvisories

Archive

1 April 2006

Vulnerabilities first published on this day (UTC), newest first.

← March 2006 2006 / April /1 May 2006 →
  1. 127
  2. 212
  3. 317
  4. 415
  5. 515
  6. 627
  7. 721
  8. 82
  9. 9 
  10. 1022
  11. 1142
  12. 1214
  13. 1347
  14. 1435
  15. 153
  16. 16 
  17. 174
  18. 1833
  19. 1930
  20. 2078
  21. 2138
  22. 22 
  23. 23 
  24. 244
  25. 2550
  26. 2643
  27. 2719
  28. 286
  29. 2928
  30. 30 
All Critical High Medium Low Exploited only Public exploit

27 results · Feed

  • Unscored —
    CVE-2005-4752

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, might allow local users to gain …

  • Unscored —
    CVE-2005-4765

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier and 7.0 SP6 and earlier, when using the weblogic.Deployer …

  • Unscored —
    CVE-2005-4757

    BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/…

  • Unscored —
    CVE-2005-4762

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier sometimes st…

  • Unscored —
    CVE-2005-4749

    HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earli…

  • Unscored —
    CVE-2005-4751

    Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and WebLogic Express 9.0, 8.1 SP4 and earlie…

  • Unscored —
    CVE-2005-4758

    Unspecified vulnerability in the Administration server in BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier …

  • Unscored —
    CVE-2005-4755

    BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier (1) stores the private key passphrase (CustomTrustKeyStore…

  • Unscored —
    CVE-2005-4750

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier allow remote…

  • Unscored —
    CVE-2005-4766

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not encrypt multicast traffic…

  • Unscored —
    CVE-2005-4761

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP5 and earlier, and 6.1 SP7 and earlier log the Java…

  • Unscored —
    CVE-2005-4767

    BEA WebLogic Server and WebLogic Express 8.1 SP5 and earlier, and 7.0 SP6 and earlier, when using username/password aut…

  • Unscored —
    CVE-2005-4756

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP5 and earlier, do not properly validate derived…

  • Unscored —
    CVE-2005-4760

    BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, when fullyDelegatedAuthorization…

  • Unscored —
    CVE-2005-4754

    BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier allow remote attackers to obtain sensitive information (in…

  • Unscored —
    CVE-2005-4759

    BEA WebLogic Server and WebLogic Express 8.1 and 7.0, during a migration across operating system platforms, do not warn…

  • Unscored —
    CVE-2005-4753

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, and 7.0 SP6 and earlier, in certain "heavy usage" scenari…

  • Unscored —
    CVE-2005-4764

    BEA WebLogic Server and WebLogic Express 9.0, 8.1, and 7.0 lock out the admin user account after multiple incorrect pas…

  • Unscored —
    CVE-2005-4763

    BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier, when Intern…

  • Unscored —
    CVE-2006-1568 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbi…

  • Unscored —
    CVE-2006-1572 Public exploit

    SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-1574

    Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Schedul…

  • Unscored —
    CVE-2006-1573 Public exploit

    PHP remote file inclusion vulnerability in index.php in MediaSlash Gallery allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-1570

    Cross-site scripting (XSS) vulnerability in Esqlanelapse 2.0 and 2.2 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-1569 Public exploit

    Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2006-1567 Public exploit

    Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attac…

  • Unscored —
    CVE-2006-1571

    Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute ar…