Archive
April 2006
Vulnerabilities first published in this month (UTC), newest first.
632 results · Feed
-
Unscored —
Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumptio…
-
Unscored —
Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause…
-
Unscored —
Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and…
-
Unscored —
Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact and attack vectors. NOTE: this issue might be re…
-
Unscored —
Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment…
-
Unscored —
Multiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions, allow remote attacker…
-
Unscored —
The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malf…
-
Unscored —CVE-2006-2070 Public exploit
Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arb…
-
Unscored —
Unspecified vulnerability in the libpkcs11 library in Sun Solaris 10 might allow local users to gain privileges or caus…
-
Unscored —
Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of service (application stop…
-
Unscored —CVE-2006-2065 Public exploit
SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-2067 Public exploit
SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows…
-
Unscored —CVE-2006-2066 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulleti…
-
Unscored —
resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login …
-
Unscored —
Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the …
-
Unscored —
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude ru…
-
Unscored —
Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY…
-
Unscored —
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules f…
-
Unscored —CVE-2006-2052 Public exploit
Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbit…
-
Unscored —CVE-2006-2051 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attacker…
-
Unscored —
Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line …
-
Unscored —
Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject …
-
Unscored —
Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allows remote attackers to obtain sensitive information …
-
Unscored —
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has a default username of admin and a default password of admin.
-
Unscored —
Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command…
-
Unscored —
Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version",…
-
Unscored —
3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denia…
-
Unscored —
SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —
The (1) shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, w…
-
Unscored —CVE-2006-2043 Public exploit
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "`" (backtick) c…
-
Unscored —
Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-2056 EPSS 13%
Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to mod…
-
Unscored —CVE-2006-2048 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers…
-
Unscored —CVE-2006-2055 EPSS 15%
Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command …
-
Unscored —CVE-2006-2061 Public exploit
SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 a…
-
Unscored —CVE-2006-2046 Public exploit
Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "F…
-
Unscored —
Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x be…
-
Unscored —CVE-2006-2059 Public exploit
action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execu…
-
Unscored —CVE-2006-1864 Public exploit
Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions…