Skip to content
OpenAdvisories

Archive

21 April 2006

Vulnerabilities first published on this day (UTC), newest first.

38 results · Feed

  • Unscored —

    Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted file…

  • Unscored —

    Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via a large CELLSPACI…

  • Unscored —

    Unspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as used in applications that…

  • Unscored —
    CVE-2006-1982 Public exploit EPSS 20%

    Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use …

  • Unscored —

    Apple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code via an invalid FRAME …

  • Unscored —
    CVE-2006-1979 Public exploit

    Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-1978 Public exploit

    SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —

    The WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-1980 Public exploit

    Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script o…

  • Unscored —

    Multiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to cause a denial of service…

  • Unscored —
    CVE-2006-1985 Public exploit EPSS 14%

    Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows…

  • Unscored —

    Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secur…

  • Critical 9.8
    CVE-1999-1588 Public exploit EPSS 10%

    Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code…

  • Unscored —

    Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to incl…

  • Unscored —
    CVE-2006-1965 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers …

  • Unscored —

    The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via a…

  • Unscored —
    CVE-2006-1960 Public exploit

    Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution …

  • Unscored —
    CVE-2006-1971 Public exploit

    Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1 before 20060320 allows …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script, probably Search Engin…

  • Unscored —

    An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial of service via a "small…

  • Unscored —

    SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher, distributed individually an…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject ar…

  • Unscored —

    Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting Solution Engine (HSE) and Us…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually …

  • Unscored —
    CVE-2006-1959 Public exploit EPSS 13%

    PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 …

  • Unscored —

    The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a denial of service (disk co…

  • Unscored —

    PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and p…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in guestbook_newentry.php in PHP-Gastebuch 1.61 allows remote attackers to inj…

  • Unscored —

    Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar, distributed individually and as…

  • Unscored —

    Multiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —

    SQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-1954 Public exploit

    SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earl…

  • Unscored —
    CVE-2006-1974 Public exploit

    SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbit…

  • Unscored —

    Turnkey Web Tools SunShop Shopping Cart allows remote attackers to obtain sensitive information via a phpinfo action to…