Archive
13 April 2006
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
Directory traversal vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to re…
-
Unscored —
Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute…
-
Unscored —
Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether …
-
Unscored —
Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, whi…
-
Unscored —CVE-2006-1784 Public exploit
PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is dis…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to …
-
Unscored —
Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a …
-
Unscored —
Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticat…
-
Unscored —
Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged acti…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slash…
-
Unscored —
Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished …
-
Unscored —CVE-2006-1781 Public exploit
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers…
-
Unscored —CVE-2006-1765 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web scri…
-
Unscored —
PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote att…
-
Unscored —CVE-2006-1778 Public exploit
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute a…
-
Unscored —
The Bourne shell (sh) in Solaris 8, 9, and 10 allows local users to cause a denial of service (sh crash) via an unspeci…
-
Unscored —CVE-2006-1779 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attack…
-
Unscored —CVE-2006-1768 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remot…
-
Unscored —
debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-re…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject…
-
Unscored —
HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, a…
-
Unscored —CVE-2006-1767 Public exploit
Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to ex…
-
Unscored —CVE-2006-1783 Public exploit
Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remot…
-
Unscored —
Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbit…
-
Unscored —CVE-2006-1771 Public exploit
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) al…
-
Unscored —CVE-2006-1773 Public exploit
SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arb…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-1777 Public exploit
Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers…
-
Unscored —
Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD…
-
Unscored —
Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might…
-
Unscored —
verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which re…
-
Unscored —CVE-2005-4774 Public exploit
Cross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local …
-
Unscored —
The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service (sh…
-
Unscored —
Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web s…
-
Unscored —
Cross-site scripting vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to inject arbitrary web scri…
-
Unscored —
MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area.
-
Unscored —CVE-2006-1758 Public exploit
SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via …