Skip to content
OpenAdvisories

Archive

24 May 2006

Vulnerabilities first published on this day (UTC), newest first.

← April 2006 2006 / May /24 June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2006-2572

    Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-2570 Public exploit

    PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2006-2577 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow…

  • Unscored —
    CVE-2006-2568 Public exploit

    PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) all…

  • Unscored —
    CVE-2006-2580

    Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allow remo…

  • Unscored —
    CVE-2006-2576 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow…

  • Unscored —
    CVE-2006-2575 Public exploit

    The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of …

    netpanzer Debian
  • Unscored —
    CVE-2006-2569 Public exploit

    SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows…

  • Unscored —
    CVE-2006-2579

    Unspecified vulnerability in HP OpenView Storage Data Protector 5.1 and 5.5 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-2578

    admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows re…

  • Low —
    CVE-2006-2571

    Alkacon OpenCms XSS via query parameter in a search action

    Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2006-2573

    SQL injection vulnerability in index.php in DGBook 1.0, with magic_quotes_gpc disabled, allows remote attackers to exec…

  • Unscored —
    CVE-2006-2549

    Stack-based buffer overflow in PDF Form Filling and Flattening Tool before 3.1.0.12 allows remote attackers to cause a …

  • Unscored —
    CVE-2006-2574

    Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow loca…

  • Unscored —
    CVE-2006-2565

    SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-2566

    Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or…

  • Unscored —
    CVE-2006-2564

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inje…

  • Unscored —
    CVE-2006-2567

    Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote atta…

  • Unscored —
    CVE-2006-1862

    The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service (panic) by runn…

  • Unscored —
    CVE-2006-2314

    PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allow…

    pygresql Debian
  • Unscored —
    CVE-2006-2313

    PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allow…

  • Unscored —
    CVE-2006-1466

    Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modi…

  • Unscored —
    CVE-2006-2558

    Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML o…

  • Unscored —
    CVE-2006-2554 Public exploit EPSS 13%

    Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to exe…

  • Unscored —
    CVE-2006-2559

    Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthoriz…

  • Unscored —
    CVE-2006-2555 Public exploit

    The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via …

  • Unscored —
    CVE-2006-2561

    Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a …

  • Unscored —
    CVE-2006-2557 Public exploit EPSS 14%

    PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsp…

  • Unscored —
    CVE-2006-2556

    Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal (TRanx r…

  • Unscored —
    CVE-2006-2560

    Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthoriz…

  • Unscored —
    CVE-2006-2553

    Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-2562

    ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UP…

  • Unscored —
    CVE-2006-2552 Public exploit

    Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to…