Skip to content
OpenAdvisories

Archive

17 May 2006

Vulnerabilities first published on this day (UTC), newest first.

← April 2006 2006 / May /17 June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2005-4803

    graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files. NOTE: th…

    graphviz Debian
  • Unscored —
    CVE-2005-4802

    Flexbackup 1.2.1 and earlier allows local users to overwrite files and execute code via a symlink attack on temporary f…

    flexbackup Debian
  • Unscored —
    CVE-2006-1953

    Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitra…

  • Unscored —
    CVE-2006-2434

    Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive …

  • Unscored —
    CVE-2006-2430

    IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials…

  • Unscored —
    CVE-2006-2429

    Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown…

  • Unscored —
    CVE-2006-2432

    IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows…

  • Unscored —
    CVE-2006-2438

    Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0…

  • Unscored —
    CVE-2006-2427

    freshclam in (1) Clam Antivirus (ClamAV) 0.88 and (2) ClamXav 1.0.3h and earlier does not drop privileges before proces…

  • Unscored —
    CVE-2006-2428

    add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary exte…

  • Unscored —
    CVE-2006-2437 Public exploit

    The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attacker…

  • Unscored —
    CVE-2006-2425 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10-23 and earlier, allow…

  • Unscored —
    CVE-2006-2436

    WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the …

  • Unscored —
    CVE-2006-2433

    Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown…

  • Unscored —
    CVE-2006-2423 Public exploit

    Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-2424 Public exploit

    PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when register_globals is enabled, allows remo…

  • Unscored —
    CVE-2006-2431 Public exploit

    Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSp…

  • Unscored —
    CVE-2006-2435

    Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown imp…

  • Unscored —
    CVE-2006-2421

    Stack-based buffer overflow in Pragma FortressSSH 4.0.7.20 allows remote attackers to execute arbitrary code via long S…

  • Unscored —
    CVE-2006-2426 Public exploit EPSS 13%

    Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows rem…

  • Unscored —
    CVE-2006-2422

    phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read …