Skip to content
OpenAdvisories

Archive

23 May 2006

Vulnerabilities first published on this day (UTC), newest first.

16 results · Feed

  • Unscored —

    The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, al…

  • Unscored —

    BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cac…

  • Unscored —

    The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts,…

  • Unscored —

    Unspecified vulnerability in the kernel in HP-UX B.11.00 allows local users to cause an unspecified denial of service v…

  • Unscored —
    CVE-2006-0747 Public exploit EPSS 13%

    Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file w…

  • Unscored —

    Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possi…

  • Unscored —

    Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers t…

  • Unscored —

    xmcdconfig in xmcd for Debian GNU/Linux 2.6-17.1 creates /var/lib/cddb and /var/lib/xmcd/discog with world writable per…

  • Unscored —
    CVE-2006-2548 Public exploit EPSS 14%

    Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacte…

  • Unscored —

    Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-2541 Public exploit

    SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —

    perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcas…

  • Unscored —

    Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local …

  • Unscored —

    Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unsp…

  • Unscored —

    A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes…