Skip to content
OpenAdvisories

Archive

22 May 2006

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2531 Public exploit

    Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to…

  • Unscored —
    CVE-2006-2516 Public exploit

    mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite vari…

  • Unscored —
    CVE-2006-2521 Public exploit

    PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-2523 Public exploit

    PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, …

  • Unscored —
    CVE-2006-2527 Public exploit

    Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain una…

  • Unscored —
    CVE-2006-2528 Public exploit

    PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-2505 Public exploit

    Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious…

  • Unscored —
    CVE-2006-2507 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow …

  • Unscored —
    CVE-2006-2503 Public exploit

    SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-2502 Public exploit EPSS 54%

    Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allo…