Skip to content
OpenAdvisories

Archive

4 May 2006

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —

    SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Se…

  • Unscored —

    Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as d…

  • Unscored —

    zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1)…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers t…

  • Unscored —
    CVE-2006-2173 Scanner template

    Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and p…

  • Unscored —
    CVE-2006-2175 Public exploit

    PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-2178 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script…

  • Unscored —

    Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute ar…

  • Unscored —
    CVE-2006-2182 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8…

  • Unscored —

    Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNT…

  • Unscored —

    Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when runnin…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-2163 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inje…

  • Unscored —

    RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Dis…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-2180 Public exploit

    Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) …

  • Unscored —

    Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service (crash) an…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers…

  • Unscored —
    CVE-2006-2176 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject…

  • Unscored —
    CVE-2006-2174 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VH…

  • Unscored —

    FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin va…

  • Unscored —

    SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-2181 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-2179 Public exploit

    Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2006-2177 Public exploit

    Cross-site scripting (XSS) vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-2187 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject…

  • Unscored —

    Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arb…