Skip to content
OpenAdvisories

Archive

30 May 2006

Vulnerabilities first published on this day (UTC), newest first.

15 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2668 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-2666 Public exploit

    PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote at…

  • Unscored —
    CVE-2006-2675 Public exploit

    PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-2667 Public exploit EPSS 15%

    Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-2665 Public exploit

    PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers t…

  • Unscored —
    CVE-2006-2661 Public exploit EPSS 16%

    ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file th…

  • Unscored —
    CVE-2006-2656 Public exploit EPSS 14%

    Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execut…

  • Unscored —
    CVE-2006-2635 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers t…

  • Unscored —
    CVE-2006-2653 Public exploit

    Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-2646 Public exploit

    Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a l…

  • Unscored —
    CVE-2006-2645 Public exploit

    PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to exec…

  • Unscored —
    CVE-2006-2648 Public exploit

    Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2006-2638 Public exploit

    SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2006-2636 Public exploit

    newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative acce…

  • Unscored —
    CVE-2006-2650 Public exploit

    SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary…