Skip to content
OpenAdvisories

Archive

May 2006

Vulnerabilities first published in this month (UTC), newest first.

← April 2006 2006 / May June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

199 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2552 Public exploit

    Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to…

  • Unscored —
    CVE-2006-0747 Public exploit EPSS 13%

    Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file w…

    freetype Debian
  • Unscored —
    CVE-2006-2548 Public exploit EPSS 14%

    Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacte…

  • Unscored —
    CVE-2006-2541 Public exploit

    SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-2531 Public exploit

    Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to…

  • Unscored —
    CVE-2006-2516 Public exploit

    mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite vari…

  • Unscored —
    CVE-2006-2521 Public exploit

    PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-2523 Public exploit

    PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, …

  • Unscored —
    CVE-2006-2527 Public exploit

    Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain una…

  • Unscored —
    CVE-2006-2528 Public exploit

    PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-2505 Public exploit

    Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious…

  • Unscored —
    CVE-2006-2507 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow …

  • Unscored —
    CVE-2006-2503 Public exploit

    SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-2502 Public exploit EPSS 54%

    Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allo…

  • Unscored —
    CVE-2005-1752 Public exploit

    viewFile.php in the scm component of Gforge before 4.0 allows remote attackers to execute arbitrary commands via shell …

  • Unscored —
    CVE-2005-1754 Public exploit

    JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a …

  • Unscored —
    CVE-2006-2494 Public exploit

    Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map …

  • Unscored —
    CVE-2006-2497 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-2499 Public exploit

    SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-2491 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earl…

  • Unscored —
    CVE-2006-2483 Public exploit

    PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-2490 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other…

  • Unscored —
    CVE-2006-2487 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-2485 Public exploit

    PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 al…

  • Unscored —
    CVE-2006-2480 Public exploit

    Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibl…

    dia Debian
  • Unscored —
    CVE-2006-2473 Public exploit

    Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-2474 Public exploit

    SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2465 Public exploit

    Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if …

    mp3info Debian
  • Unscored —
    CVE-2006-2460 Public exploit EPSS 10%

    Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variabl…

  • Unscored —
    CVE-2006-2459 Public exploit

    SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to exe…

  • Medium —
    CVE-2006-2458 Public exploit

    Libextractor multiple heap-based buffer overflows

    Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (pl…

    libextractor extractor Debian PyPI
  • Unscored —
    CVE-2006-2437 Public exploit

    The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attacker…

  • Unscored —
    CVE-2006-2425 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PRV.php in PhpRemoteView, possibly 2003-10-23 and earlier, allow…

  • Unscored —
    CVE-2006-2423 Public exploit

    Cross-site scripting (XSS) vulnerability in ftplogin/index.php in Confixx 3.1.2 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-2424 Public exploit

    PHP remote file inclusion vulnerability in ezUserManager 1.6 and earlier, when register_globals is enabled, allows remo…

  • Unscored —
    CVE-2006-2431 Public exploit

    Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSp…

  • Unscored —
    CVE-2006-2426 Public exploit EPSS 13%

    Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows rem…

  • Unscored —
    CVE-2006-2408 Public exploit

    Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a lar…

  • Unscored —
    CVE-2006-2405 Public exploit

    Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, w…

  • Unscored —
    CVE-2006-2407 Public exploit EPSS 72%

    Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other produ…