Archive
April 2006
Vulnerabilities first published in this month (UTC), newest first.
207 results · Clear filters · Feed
-
Unscored —
Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly …
-
Unscored —CVE-2006-1998 Public exploit
OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error …
-
Unscored —CVE-2006-1999 Public exploit
The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an inc…
-
Unscored —CVE-2006-1995 Public exploit
Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2006-2002 Public exploit
PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-2012 Public exploit
Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the …
-
Unscored —CVE-2006-2016 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject …
-
Unscored —CVE-2006-2001 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-2005 Public exploit
Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP …
-
Unscored —CVE-2006-2008 Public exploit
PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote atta…
-
Unscored —
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a passwor…
-
Unscored —
mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service…
-
Unscored —
Heap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in applications that use …
-
Unscored —CVE-2006-1979 Public exploit
Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject ar…
-
Unscored —CVE-2006-1978 Public exploit
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-1980 Public exploit
Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script o…
-
Unscored —
Heap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4.6 and earlier, allows…
-
Critical 9.8
Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2006-1965 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier allow remote attackers …
-
Unscored —CVE-2006-1960 Public exploit
Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution …
-
Unscored —CVE-2006-1971 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote attackers to inject arbitr…
-
Unscored —
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 …
-
Unscored —CVE-2006-1954 Public exploit
SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earl…
-
Unscored —CVE-2006-1974 Public exploit
SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbit…
-
Unscored —CVE-2006-1943 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote at…
-
Unscored —CVE-2006-1941 Public exploit
Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a craf…
-
Unscored —CVE-2006-1944 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to in…
-
Unscored —CVE-2006-1945 Public exploit
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arb…
-
Unscored —CVE-2006-1950 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remot…
-
Unscored —CVE-2006-1946 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrar…
-
Unscored —CVE-2006-1947 Public exploit
Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute…
-
Unscored —
The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service …
-
Unscored —CVE-2006-1913 Public exploit
Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attack…
-
Unscored —CVE-2006-1917 Public exploit
SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2006-1921 Public exploit
nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in t…
-
Unscored —CVE-2006-1922 Public exploit
PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to ex…
-
Unscored —CVE-2006-1918 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-1909 Public exploit
Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2006-1929 Public exploit
PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote attackers to execute ar…
-
Unscored —CVE-2006-1912 Public exploit
MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, whi…