Skip to content
OpenAdvisories

Archive

1 May 2006

Vulnerabilities first published on this day (UTC), newest first.

← April 2006 2006 / May /1 June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2006-2128

    Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-2130

    SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-2127 Public exploit

    SQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-2129

    Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arb…

  • Unscored —
    CVE-2006-2132 Public exploit

    SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-2133

    SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-2131

    include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify t…

  • Unscored —
    CVE-2006-2124 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-2122 Public exploit

    PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2006-2120

    The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a craft…

    tiff Debian
  • Unscored —
    CVE-2006-2121 Public exploit

    PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to e…

  • Unscored —
    CVE-2006-2126 Public exploit

    SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-2123

    Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 …

  • Unscored —
    CVE-2006-2119 Public exploit

    PHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-2116 Public exploit

    planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.

  • Unscored —
    CVE-2006-2118

    JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, poss…

  • Unscored —
    CVE-2006-2117

    Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML vi…

  • Unscored —
    CVE-2006-1989

    Buffer overflow in the get_database function in the HTTP client in Freshclam in ClamAV 0.80 to 0.88.1 might allow remot…

    clamav Debian
  • Unscored —
    CVE-2006-2114

    Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request.

  • Unscored —
    CVE-2006-2110

    Virtual Private Server (Vserver) 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilit…

  • Unscored —
    CVE-2006-2115

    Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified v…

  • Unscored —
    CVE-2006-2111 Public exploit EPSS 41%

    A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive i…