6 April 2006

27 results · Feed

• Unscored —
  CVE-2006-1629

  OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with …

  openvpn Debian
  Apr 6, 2006
• Unscored —
  CVE-2006-1615 EPSS 12%

  Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote …

  clamav Debian
  Apr 6, 2006
• Unscored —
  CVE-2006-1614

  Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before …

  clamav Debian
  Apr 6, 2006
• Unscored —
  CVE-2006-1630

  The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to c…

  clamav Debian
  Apr 6, 2006
• Unscored —
  CVE-2006-1655

  Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly ha…

  mp3gain mpg123 Debian
  Apr 6, 2006
• Unscored —
  CVE-2006-1649

  The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any d…

  Apr 6, 2006
• Unscored —
  CVE-2006-1652 Public exploit EPSS 68%

  Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-as…

  Apr 6, 2006
• Unscored —
  CVE-2006-1651 EPSS 15%

  Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2…

  Apr 6, 2006
• Unscored —
  CVE-2006-1650

  Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening th…

  Apr 6, 2006
• Unscored —
  CVE-2006-1640

  Cross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web s…

  Apr 6, 2006
• Unscored —
  CVE-2006-1638

  Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (…

  Apr 6, 2006
• Unscored —
  CVE-2006-1644

  login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows…

  Apr 6, 2006
• Unscored —
  CVE-2006-1645 Public exploit

  Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows re…

  Apr 6, 2006
• Unscored —
  CVE-2006-1635

  LucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct request to /lucid_phplib/transl…

  Apr 6, 2006
• Unscored —
  CVE-2006-1653

  PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbit…

  Apr 6, 2006
• Unscored —
  CVE-2006-1646

  The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as…

  Apr 6, 2006
• Unscored —
  CVE-2006-1641

  Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via th…

  Apr 6, 2006
• Unscored —
  CVE-2006-1634 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary…

  Apr 6, 2006
• Unscored —
  CVE-2006-1639

  SQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute arbitrary SQL commands via th…

  Apr 6, 2006
• Unscored —
  CVE-2006-1656

  vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric…

  Apr 6, 2006
• Unscored —
  CVE-2006-1643

  SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands vi…

  Apr 6, 2006
• Unscored —
  CVE-2006-1648

  SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of…

  Apr 6, 2006
• Unscored —
  CVE-2006-1642

  Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HT…

  Apr 6, 2006
• Unscored —
  CVE-2006-1636

  PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to exec…

  Apr 6, 2006
• Unscored —
  CVE-2006-1654 Public exploit

  Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Wi…

  Apr 6, 2006
• Unscored —
  CVE-2006-1647

  An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versio…

  Apr 6, 2006
• Unscored —
  CVE-2006-1637

  Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script…

  Apr 6, 2006