Archive
9 May 2006
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —CVE-2006-0034 EPSS 32%
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed …
-
Unscored —
Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the r…
-
Unscored —CVE-2006-1184 EPSS 30%
Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 all…
-
Unscored —
bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a ce…
-
Unscored —CVE-2006-2296 Public exploit
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute ar…
-
Unscored —
Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to …
-
Unscored —
SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-a…
-
Unscored —CVE-2006-2294 Public exploit
Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2006-2280 Public exploit
Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list a…
-
Unscored —CVE-2006-2285 Public exploit
PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PH…
-
Unscored —
X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to up…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject a…
-
Unscored —
Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mD…
-
Unscored —
Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-2284 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP c…
-
Unscored —
Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to e…
-
Unscored —CVE-2006-2277 Public exploit
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (applica…
-
Unscored —CVE-2006-2295 Public exploit
Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absol…
-
Unscored —CVE-2006-2293 Public exploit
SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary…
-
Unscored —
Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors.
-
Unscored —
Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages w…
-
Unscored —
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of…
-
Unscored —
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) v…
-
Unscored —
Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a deni…
-
Unscored —
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion,…
-
Unscored —
The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kern…
-
Unscored —
Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP f…
-
Unscored —
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) an…
-
Unscored —
Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote …
-
Unscored —
SQL injection vulnerability in Chirpy! 0.1 allows remote attackers to execute arbitrary SQL commands via unspecified pa…
-
Unscored —CVE-2006-2249 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote att…
-
Unscored —CVE-2006-2255 Public exploit
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-2262 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-2256 Public exploit
PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to exec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in easyEvent 1.2 allows remote attackers to inject arbitrary web …