Archive
April 2006
Vulnerabilities first published in this month (UTC), newest first.
207 results · Clear filters · Feed
-
Unscored —CVE-2006-2107 Public exploit
Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or ex…
-
Unscored —CVE-2006-2102 Public exploit
Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) i…
-
Unscored —
Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN Client when accessing a Jun…
-
Unscored —CVE-2006-2097 Public exploit
SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbi…
-
Unscored —CVE-2006-2108 Public exploit
parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a …
-
Unscored —CVE-2006-2101 Public exploit
Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files via a .. (dot dot) in …
-
Unscored —CVE-2006-2099 Public exploit
Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write arbitrary files via a .. (dot…
-
Unscored —
Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is con…
-
Unscored —CVE-2006-2100 Public exploit
Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a ..…
-
Unscored —CVE-2006-2089 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to inject arb…
-
Unscored —CVE-2005-4792 Public exploit
SQL injection vulnerability in index.php in Appalachian State University phpWebSite 0.10.1 and earlier allows remote at…
-
Unscored —CVE-2006-2079 Public exploit
Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2…
-
Unscored —
Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET_DOMAIN_INDEX_METAD…
-
Unscored —CVE-2006-2070 Public exploit
Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arb…
-
Unscored —CVE-2006-2065 Public exploit
SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-2067 Public exploit
SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows…
-
Unscored —CVE-2006-2066 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulleti…
-
Unscored —CVE-2006-2052 Public exploit
Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbit…
-
Unscored —CVE-2006-2051 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attacker…
-
Unscored —CVE-2006-2043 Public exploit
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "`" (backtick) c…
-
Unscored —CVE-2006-2048 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers…
-
Unscored —CVE-2006-2061 Public exploit
SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 a…
-
Unscored —CVE-2006-2046 Public exploit
Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote a…
-
Unscored —CVE-2006-2059 Public exploit
action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execu…
-
Unscored —CVE-2006-1864 Public exploit
Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions…
-
Unscored —CVE-2006-2037 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote attackers to inject arbit…
-
Unscored —CVE-2006-2040 Public exploit
Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-2027 Public exploit
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server…
-
Unscored —CVE-2006-2032 Public exploit
Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-2028 Public exploit
Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote at…
-
Unscored —CVE-2006-2029 Public exploit
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-2034 Public exploit
SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQ…
-
Unscored —
Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of…
-
Unscored —CVE-2006-2024 Public exploit
Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a T…
-
Unscored —
Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attac…
-
Unscored —CVE-2006-1863 Public exploit
Directory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to escape chroot restrictions …
-
Unscored —CVE-2006-2020 Public exploit
Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web docum…
-
Unscored —
Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remot…
-
Unscored —CVE-2006-2019 Public exploit
Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (C…
-
Unscored —CVE-2006-1994 Public exploit
PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code…