Skip to content
OpenAdvisories

Archive

25 April 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2026 Public exploit EPSS 10%

    Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of…

  • Unscored —
    CVE-2006-2024 Public exploit

    Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a T…

  • Unscored —
    CVE-2006-2025 Public exploit EPSS 11%

    Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attac…

  • Unscored —
    CVE-2006-1863 Public exploit

    Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions …

  • Unscored —
    CVE-2006-2020 Public exploit

    Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web docum…

  • Unscored —
    CVE-2006-2022 Public exploit EPSS 15%

    Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remot…

  • Unscored —
    CVE-2006-2019 Public exploit

    Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (C…

  • Unscored —
    CVE-2006-1994 Public exploit

    PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-1993 Public exploit EPSS 54%

    Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly …

  • Unscored —
    CVE-2006-1998 Public exploit

    OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error …

  • Unscored —
    CVE-2006-1999 Public exploit

    The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an inc…

  • Unscored —
    CVE-2006-1995 Public exploit

    Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2006-2002 Public exploit

    PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2012 Public exploit

    Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the …

  • Unscored —
    CVE-2006-2016 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject …

  • Unscored —
    CVE-2006-2001 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-2005 Public exploit

    Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP …

  • Unscored —
    CVE-2006-2008 Public exploit

    PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote atta…

  • Unscored —
    CVE-2006-0230 Public exploit EPSS 16%

    Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a passwor…

  • Unscored —
    CVE-2006-1992 Public exploit EPSS 41%

    mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service…