Archive
25 April 2006
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of…
-
Unscored —CVE-2006-2024 Public exploit
Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a T…
-
Unscored —
Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attac…
-
Unscored —CVE-2006-1863 Public exploit
Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions …
-
Unscored —
Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface (ARI) web interf…
-
Unscored —
Integer overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier allows remote attackers…
-
Unscored —CVE-2006-2020 Public exploit
Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web docum…
-
Unscored —
Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remot…
-
Unscored —CVE-2006-2019 Public exploit
Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (C…
-
Unscored —
Multiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of service (crash) …
-
Unscored —
Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to ob…
-
Unscored —CVE-2006-1994 Public exploit
PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code…
-
Unscored —
Multiple buffer overflows in abc2ps before 1.3.3 allow user-assisted attackers to execute arbitrary code via crafted AB…
-
Unscored —
Off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vect…
-
Unscored —
Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service (abort)…
-
Unscored —
Multiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to cause a denial of servic…
-
Unscored —
Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of servi…
-
Unscored —
Multiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to cause a denial of servic…
-
Unscored —
Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the …
-
Unscored —
Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly …
-
Unscored —CVE-2006-1998 Public exploit
OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error …
-
Unscored —CVE-2006-1999 Public exploit
The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an inc…
-
Unscored —
Buffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code via the telnet dissec…
-
Unscored —
Multiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a denial of servi…
-
Unscored —
Buffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of service (crash) and possi…
-
Unscored —CVE-2006-1995 Public exploit
Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via …
-
Unscored —
Cross-site scripting (XSS) vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arb…
-
Unscored —
SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-2002 Public exploit
PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-2012 Public exploit
Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the …
-
Unscored —
Cross-site scripting (XSS) vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary …
-
Unscored —
SQL injection vulnerability in page.php in SL_site 1.0 allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary fil…
-
Unscored —
PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to …
-
Unscored —
Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (…
-
Unscored —CVE-2006-2016 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject …
-
Unscored —CVE-2006-2001 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary w…
-
Unscored —
Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long str…
-
Unscored —
Cross-site scripting (XSS) vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to i…
-
Unscored —
Dnsmasq 2.29 allows remote attackers to cause a denial of service (application crash) via a DHCP client broadcast reply…