Skip to content
OpenAdvisories

Archive

19 April 2006

Vulnerabilities first published on this day (UTC), newest first.

← March 2006 2006 / April /19 May 2006 →
  1. 127
  2. 212
  3. 317
  4. 415
  5. 515
  6. 627
  7. 721
  8. 82
  9. 9 
  10. 1022
  11. 1142
  12. 1214
  13. 1347
  14. 1435
  15. 153
  16. 16 
  17. 174
  18. 1833
  19. 1930
  20. 2078
  21. 2138
  22. 22 
  23. 23 
  24. 244
  25. 2550
  26. 2643
  27. 2719
  28. 286
  29. 2928
  30. 30 
All Critical High Medium Low Exploited only Public exploit

30 results · Feed

  • Unscored —
    CVE-2006-1524

    madvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions, which allows local use…

  • Unscored —
    CVE-2006-1525

    ip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of service (panic) via a reques…

  • Unscored —
    CVE-2006-1837 Public exploit

    SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-1832 Public exploit

    sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action.

  • Unscored —
    CVE-2006-1829

    EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password …

  • Unscored —
    CVE-2006-1850 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-1836

    Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 …

  • Unscored —
    CVE-2006-1853 Public exploit

    Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to exec…

  • Unscored —
    CVE-2006-1839 Public exploit

    PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows …

  • Unscored —
    CVE-2006-1833

    Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause …

  • Unscored —
    CVE-2006-1841

    Cross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and possibly other versions befo…

  • Unscored —
    CVE-2006-1831 Public exploit

    Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allow…

  • Unscored —
    CVE-2006-1846

    Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to in…

  • Unscored —
    CVE-2006-1842

    Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-1847

    SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-1838 Public exploit

    edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.

  • Unscored —
    CVE-2006-1834 Public exploit EPSS 12%

    Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a st…

  • Unscored —
    CVE-2006-1848

    Multiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow remote attackers to inject …

  • Unscored —
    CVE-2006-1830

    Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allo…

  • Unscored —
    CVE-2006-1849 Public exploit

    Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to…

  • Unscored —
    CVE-2006-1840

    Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service (cras…

  • Unscored —
    CVE-2006-1852 Public exploit

    SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-1851

    xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) act…

  • Unscored —
    CVE-2006-1835 Public exploit

    Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-1854

    Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and earlier allow remote attackers to inject…

  • Unscored —
    CVE-2006-1828 Public exploit

    SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-1843

    Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-1247

    rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a sym…

  • Unscored —
    CVE-2006-1844

    The Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes sensitive information in w…

    shadow Debian
  • Unscored —
    CVE-2005-4786

    Buffer overflow in the archive decompression library (vrAZMain.dll 5.8.22.137), as used in HAURI anti-virus products in…