Skip to content
OpenAdvisories

Archive

19 May 2006

Vulnerabilities first published on this day (UTC), newest first.

← April 2006 2006 / May /19 June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Unscored —
    CVE-2006-1856

    Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) fi…

  • Unscored —
    CVE-2006-2484

    Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-2491 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earl…

  • Unscored —
    CVE-2006-2483 Public exploit

    PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-2490 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other…

  • Unscored —
    CVE-2006-2487 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-2486

    SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-2488

    Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-2485 Public exploit

    PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 al…

  • Unscored —
    CVE-2006-2489

    Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2006-0039

    Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADM…

  • Unscored —
    CVE-2005-3782

    Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, …

  • Unscored —
    CVE-2006-2480 Public exploit

    Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibl…

    dia Debian
  • Unscored —
    CVE-2006-2312

    Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows …

  • Unscored —
    CVE-2006-0059

    Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server befo…

  • Unscored —
    CVE-2006-2476

    Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows…

  • Unscored —
    CVE-2006-2475

    Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allo…

  • Unscored —
    CVE-2006-2477

    Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attack…

  • Unscored —
    CVE-2006-2478

    Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a …

  • Unscored —
    CVE-2006-2479

    The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which all…

  • Unscored —
    CVE-2006-2473 Public exploit

    Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-2474 Public exploit

    SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2465 Public exploit

    Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if …

    mp3info Debian
  • Unscored —
    CVE-2006-2464

    stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrat…

  • Unscored —
    CVE-2006-2466

    BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages duri…

  • Unscored —
    CVE-2006-2471

    Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive in…

  • Unscored —
    CVE-2006-2461

    BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, wh…

  • Unscored —
    CVE-2006-2470

    Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the consol…

  • Unscored —
    CVE-2006-2460 Public exploit EPSS 10%

    Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variabl…

  • Unscored —
    CVE-2006-2469

    The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and p…

  • Unscored —
    CVE-2006-2459 Public exploit

    SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to exe…

  • Unscored —
    CVE-2006-2467

    BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic se…

  • Unscored —
    CVE-2006-2468

    The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain n…

  • Unscored —
    CVE-2006-2462

    BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure ch…

  • Unscored —
    CVE-2006-2472

    Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 all…

  • Unscored —
    CVE-2006-2463

    view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain req…