Skip to content
OpenAdvisories

Archive

9 May 2006

Vulnerabilities first published on this day (UTC), newest first.

← April 2006 2006 / May /9 June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

66 results · Feed

  • Unscored —
    CVE-2006-2242 Public exploit

    acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) c…

  • Unscored —
    CVE-2006-2269 Public exploit

    Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-2270 Public exploit EPSS 14%

    PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-2240

    Unspecified vulnerability in the (1) web cache or (2) web proxy in Fujitsu NetShelter/FW allows remote attackers to cau…

  • Unscored —
    CVE-2006-2268

    SQL injection vulnerability in FlexCustomer 0.0.4 and earlier allows remote attackers to bypass authentication and exec…

  • Unscored —
    CVE-2006-2254 Public exploit

    Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2006-2264 Public exploit

    Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2265 Public exploit

    Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to in…

  • Unscored —
    CVE-2006-2259

    SQL injection vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-2267

    Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unkno…

  • Unscored —
    CVE-2006-2261 Public exploit

    PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2006-2247

    WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which al…

  • Unscored —
    CVE-2006-2241 Public exploit

    PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-2250

    CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1) /inc/show.inc.php or…

  • Unscored —
    CVE-2006-2248

    Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests contai…

  • Unscored —
    CVE-2006-2239

    SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-2161

    Buffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0 and 4.3, and possibly…

  • Unscored —
    CVE-2006-2246

    Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-2263 Public exploit

    SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-2245 Public exploit

    PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attac…

  • Unscored —
    CVE-2006-2251

    SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2…

  • Unscored —
    CVE-2006-2258

    Cross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-2243

    Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-2244

    Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-2252 Public exploit

    Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-2253 Public exploit

    PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execut…