Skip to content
OpenAdvisories

Archive

9 May 2006

Vulnerabilities first published on this day (UTC), newest first.

← April 2006 2006 / May /9 June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

27 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2296 Public exploit

    SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-2294 Public exploit

    Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2006-2280 Public exploit

    Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list a…

  • Unscored —
    CVE-2006-2285 Public exploit

    PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-2284 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-2277 Public exploit

    Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2006-2295 Public exploit

    Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absol…

  • Unscored —
    CVE-2006-2293 Public exploit

    SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-0027 Public exploit EPSS 78%

    Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages w…

  • Unscored —
    CVE-2006-0515 Public exploit EPSS 10%

    Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) an…

  • Unscored —
    CVE-2006-1172 Public exploit EPSS 15%

    Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote …

  • Unscored —
    CVE-2006-2249 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, al…

  • Unscored —
    CVE-2006-2255 Public exploit

    Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2006-2262 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-2256 Public exploit

    PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2006-2242 Public exploit

    acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) c…

  • Unscored —
    CVE-2006-2269 Public exploit

    Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-2270 Public exploit EPSS 14%

    PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-2254 Public exploit

    Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2006-2264 Public exploit

    Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2265 Public exploit

    Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to in…

  • Unscored —
    CVE-2006-2261 Public exploit

    PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2006-2241 Public exploit

    PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-2263 Public exploit

    SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-2245 Public exploit

    PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attac…

  • Unscored —
    CVE-2006-2252 Public exploit

    Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-2253 Public exploit

    PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execut…