Archive
12 May 2006
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —CVE-2006-2339 Public exploit
SQL injection vulnerability in index.php in evoTopsites 2.x and evoTopsites Pro 2.x allows remote attackers to execute …
-
Unscored —
The transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and earlier, and 3120 5.0…
-
Unscored —CVE-2006-2331 Public exploit
Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbit…
-
Unscored —
AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for (1) adodb…
-
Unscored —CVE-2006-2315 Public exploit
PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to ex…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows …
-
Unscored —
Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and e…
-
Unscored —
Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files …
-
Unscored —
Multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) NDPS/iPrint module in Novell Distributed Print Services …
-
Unscored —
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to …
-
Unscored —
Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authen…
-
Unscored —
Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers t…
-
Unscored —
Mozilla Firefox 1.5.0.3 allows remote attackers to cause a denial of service via a web page with a large number of IMG …
-
Unscored —
The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabin…
-
Unscored —
SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to ex…
-
Unscored —
Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers…
-
Unscored —CVE-2006-2316 Public exploit
S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memor…
-
Unscored —
Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote …
-
Unscored —CVE-2006-2334 Public exploit
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly c…
-
Unscored —
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) 1.1.1 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2006-2336 Public exploit
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute ar…
-
Unscored —CVE-2006-2330 Public exploit
PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated use…
-
Unscored —
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which al…
-
Unscored —
PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure lo…