Skip to content
OpenAdvisories

Archive

4 April 2006

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink a…

  • Unscored —

    Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to exec…

  • Unscored —

    Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to va…

  • Unscored —

    Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown at…

  • Unscored —

    BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords f…

  • Unscored —

    Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote a…

  • Unscored —

    Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unk…

  • Unscored —

    Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arb…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-1613 Public exploit

    Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —

    Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui author…

  • Unscored —

    Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web…

  • Unscored —

    PHP remote file inclusion vulnerability in includes/functions_common.php in the VWar Account module (vWar_Account) in P…

  • Unscored —
    CVE-2006-1610 Public exploit

    PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Auto…