Skip to content
OpenAdvisories

Archive

25 May 2006

Vulnerabilities first published on this day (UTC), newest first.

← April 2006 2006 / May /25 June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2006-2607

    do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local us…

    cron Debian
  • Unscored —
    CVE-2006-2586

    Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML o…

  • Unscored —
    CVE-2006-2605

    Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-2606

    Cross-site scripting (XSS) vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to injec…

  • Unscored —
    CVE-2006-2587 Public exploit

    Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products inclu…

  • Unscored —
    CVE-2006-2581

    Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to in…

  • Unscored —
    CVE-2006-2585

    SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands vi…

  • High —
    CVE-2006-2582

    Remote code execution in rwiki

    The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors.

    rwiki RubyGems
  • Unscored —
    CVE-2006-2584

    Multiple cross-site scripting (XSS) vulnerabilities in post.php in SkyeBox 1.2.0 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-2444 Public exploit EPSS 23%

    The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause…

  • Unscored —
    CVE-2006-2592

    Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, w…

  • Unscored —
    CVE-2006-2589

    SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2583 Public exploit

    PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attac…

  • Unscored —
    CVE-2006-2588

    Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension.…

  • Unscored —
    CVE-2006-2590

    SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown …

  • Unscored —
    CVE-2006-2591

    Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exp…

  • Unscored —
    CVE-2005-4805

    Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004…

  • Unscored —
    CVE-2005-4806

    Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to …

  • Unscored —
    CVE-2005-4804

    Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, an…