Skip to content
OpenAdvisories

Archive

11 April 2006

Vulnerabilities first published on this day (UTC), newest first.

← March 2006 2006 / April /11 May 2006 →
  1. 127
  2. 212
  3. 317
  4. 415
  5. 515
  6. 627
  7. 721
  8. 82
  9. 9 
  10. 1022
  11. 1142
  12. 1214
  13. 1347
  14. 1435
  15. 153
  16. 16 
  17. 174
  18. 1833
  19. 1930
  20. 2078
  21. 2138
  22. 22 
  23. 23 
  24. 244
  25. 2550
  26. 2643
  27. 2719
  28. 286
  29. 2928
  30. 30 
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Unscored —
    CVE-2006-0015 Public exploit EPSS 25%

    Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 200…

  • Unscored —
    CVE-2006-1715

    Multiple directory traversal vulnerabilities in Christian Kindahl TUGZip 3.4.0.0, 3.3.0.0, and 3.1.0.2 allow user-assis…

  • Unscored —
    CVE-2006-1190 Public exploit EPSS 62%

    Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamical…

  • Unscored —
    CVE-2006-1716

    Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote att…

  • Unscored —
    CVE-2006-1714 Public exploit

    CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP hea…

  • Unscored —
    CVE-2006-1713 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inj…

  • Unscored —
    CVE-2006-1192 Public exploit EPSS 32%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address …

  • Unscored —
    CVE-2006-1719 EPSS 14%

    Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascadin…

  • Unscored —
    CVE-2006-1188 Public exploit EPSS 58%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a c…

  • Unscored —
    CVE-2006-1718 Public exploit

    Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access contro…

  • Unscored —
    CVE-2006-1717

    Cross-site scripting (XSS) vulnerability in newthread.php in MyBB (aka MyBulletinBoard) 1.10, when configured to permit…

  • Unscored —
    CVE-2006-1191 Public exploit EPSS 32%

    Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a brow…

  • Unscored —
    CVE-2006-1721

    digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other version…

    cyrus-sasl2 Debian
  • Unscored —
    CVE-2006-1189 Public exploit EPSS 62%

    Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-1720

    Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-1186 Public exploit EPSS 58%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (…

  • Unscored —
    CVE-2006-1722

    Cross-site scripting (XSS) vulnerability in suche.htm in ShopXS 4.0 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-1185 Public exploit EPSS 70%

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2006-1712

    Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote …

  • Unscored —
    CVE-2006-1710 Public exploit

    SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary …

  • Medium —
    CVE-2006-1711 Public exploit

    Plone allows remote users to modify arbitrary portraits

    Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.

    plone PyPI
  • Unscored —
    CVE-2006-1706 Public exploit

    Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-1708 Public exploit

    SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-1694 Public exploit

    SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-1697 Public exploit

    Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary we…

  • Unscored —
    CVE-2006-1692

    Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-1700

    Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, whi…

  • Unscored —
    CVE-2006-1690

    Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-1698

    Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary we…

  • Unscored —
    CVE-2006-1691

    SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the us…

  • Unscored —
    CVE-2006-1703

    PHP remote file inclusion vulnerability in lire.php in Sire 2.0 nws allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2006-1699 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-1709 Public exploit

    Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-1702 Public exploit

    PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary P…

    spip Debian
  • Unscored —
    CVE-2006-1693

    Unspecified vulnerability in GlobalSCAPE Secure FTP Server before 3.1.4 Build 01.10.2006 allows attackers to cause a de…

  • Unscored —
    CVE-2006-1707

    index.php in Shopweezle 2.0 allows remote attackers to include arbitrary local files via the url parameter.

  • Unscored —
    CVE-2006-1705

    Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or …

  • Unscored —
    CVE-2006-1695

    The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to…

    fbi Debian
  • Unscored —
    CVE-2006-1696

    Cross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2006-1701 Public exploit

    Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbit…