Skip to content
OpenAdvisories

Archive

11 April 2006

Vulnerabilities first published on this day (UTC), newest first.

← March 2006 2006 / April /11 May 2006 →
  1. 127
  2. 212
  3. 317
  4. 415
  5. 515
  6. 627
  7. 721
  8. 82
  9. 9 
  10. 1022
  11. 1142
  12. 1214
  13. 1347
  14. 1435
  15. 153
  16. 16 
  17. 174
  18. 1833
  19. 1930
  20. 2078
  21. 2138
  22. 22 
  23. 23 
  24. 244
  25. 2550
  26. 2643
  27. 2719
  28. 286
  29. 2928
  30. 30 
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • Unscored —
    CVE-2006-0015 Public exploit EPSS 25%

    Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 200…

  • Unscored —
    CVE-2006-1190 Public exploit EPSS 62%

    Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamical…

  • Unscored —
    CVE-2006-1714 Public exploit

    CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP hea…

  • Unscored —
    CVE-2006-1713 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inj…

  • Unscored —
    CVE-2006-1192 Public exploit EPSS 32%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address …

  • Unscored —
    CVE-2006-1188 Public exploit EPSS 58%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a c…

  • Unscored —
    CVE-2006-1718 Public exploit

    Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access contro…

  • Unscored —
    CVE-2006-1191 Public exploit EPSS 32%

    Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a brow…

  • Unscored —
    CVE-2006-1189 Public exploit EPSS 62%

    Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-1186 Public exploit EPSS 58%

    Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (…

  • Unscored —
    CVE-2006-1185 Public exploit EPSS 70%

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2006-1710 Public exploit

    SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary …

  • Medium —
    CVE-2006-1711 Public exploit

    Plone allows remote users to modify arbitrary portraits

    Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.

    plone PyPI
  • Unscored —
    CVE-2006-1706 Public exploit

    Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-1708 Public exploit

    SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-1694 Public exploit

    SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-1697 Public exploit

    Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary we…

  • Unscored —
    CVE-2006-1699 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-1709 Public exploit

    Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-1702 Public exploit

    PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary P…

    spip Debian
  • Unscored —
    CVE-2006-1701 Public exploit

    Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-1704 Public exploit

    Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upl…