Skip to content
OpenAdvisories

Archive

April 2006

Vulnerabilities first published in this month (UTC), newest first.

← March 2006 2006 / April May 2006 →
  1. 127
  2. 212
  3. 317
  4. 415
  5. 515
  6. 627
  7. 721
  8. 82
  9. 9 
  10. 1022
  11. 1142
  12. 1214
  13. 1347
  14. 1435
  15. 153
  16. 16 
  17. 174
  18. 1833
  19. 1930
  20. 2078
  21. 2138
  22. 22 
  23. 23 
  24. 244
  25. 2550
  26. 2643
  27. 2719
  28. 286
  29. 2928
  30. 30 
All Critical High Medium Low Exploited only Public exploit

207 results · Clear filters · Feed

  • Unscored —
    CVE-2006-1919 Public exploit

    PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-1916 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers…

  • Unscored —
    CVE-2006-1925 Public exploit

    Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in CuteNews 1.4.1 allows remot…

  • Unscored —
    CVE-2006-1926 Public exploit

    SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-1906 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-1900 Public exploit EPSS 17%

    Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x befor…

  • Unscored —
    CVE-2006-1905 Public exploit EPSS 15%

    Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary…

    xine-ui Debian
  • Unscored —
    CVE-2006-1878 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-1893 Public exploit

    Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-1837 Public exploit

    SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-1832 Public exploit

    sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action.

  • Unscored —
    CVE-2006-1850 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-1853 Public exploit

    Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to exec…

  • Unscored —
    CVE-2006-1839 Public exploit

    PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows …

  • Unscored —
    CVE-2006-1831 Public exploit

    Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allow…

  • Unscored —
    CVE-2006-1838 Public exploit

    edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.

  • Unscored —
    CVE-2006-1834 Public exploit EPSS 12%

    Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a st…

  • Unscored —
    CVE-2006-1849 Public exploit

    Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to…

  • Unscored —
    CVE-2006-1852 Public exploit

    SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-1835 Public exploit

    Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-1828 Public exploit

    SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-1800 Public exploit

    Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and ex…

  • Unscored —
    CVE-2006-1803 Public exploit

    Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary…

    phpmyadmin Debian
  • Unscored —
    CVE-2006-1821 Public exploit

    Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (…

  • Unscored —
    CVE-2006-1799 Public exploit

    censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharac…

  • Unscored —
    CVE-2006-1808 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-1822 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to in…

  • Unscored —
    CVE-2006-1820 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-1805 Public exploit

    SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-1802 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject a…

  • Unscored —
    CVE-2006-1825 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2006-1801 Public exploit

    Cross-site scripting (XSS) vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-1793 Public exploit

    Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbP…

  • Unscored —
    CVE-2006-1794 Public exploit

    SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-0992 Public exploit EPSS 73%

    Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute a…

  • Unscored —
    CVE-2005-4781 Public exploit

    Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attack…

  • Low 3.7
    CVE-2005-4780 Public exploit

    Cross-site scripting (XSS) vulnerability in Fidra Lighthouse CMS 1.1.0 and earlier allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-1551 Public exploit EPSS 51%

    Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2006-1784 Public exploit

    PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is dis…

  • Unscored —
    CVE-2006-1786 Public exploit EPSS 12%

    Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to …