Skip to content
OpenAdvisories

Archive

3 April 2006

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    SQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to execute arbitrary SQL com…

  • Unscored —

    AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via …

  • Unscored —

    Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VC_CRYPTO_METHOD option is OPENSSL, al…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in inscription.php in Annuaire (Directory) 1.0 allows remote attackers to inje…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory Administration (ARIA) …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57 allow remote attackers to…

  • Unscored —

    Annuaire (Directory) 1.0 allows remote attackers to obtain sensitive information via a direct request to include/lang-e…

  • Unscored —

    The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via…

  • Unscored —

    Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote atta…

  • Unscored —
    CVE-2006-1593 Public exploit

    The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.0…

  • Unscored —

    NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with …

  • Unscored —

    The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl result…

  • Unscored —
    CVE-2006-1590 Public exploit

    Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE…

  • Unscored —

    PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows …

  • Unscored —

    Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attac…

  • Unscored —

    Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary c…

  • Unscored —
    CVE-2006-1595 Public exploit

    Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attacker…