Skip to content
OpenAdvisories

Archive

May 2006

Vulnerabilities first published in this month (UTC), newest first.

199 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2413 Public exploit

    GNUnet before SVN revision 2781 allows remote attackers to cause a denial of service (infinite loop and CPU consumption…

  • Unscored —
    CVE-2006-2409 Public exploit

    Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local us…

  • Unscored —
    CVE-2006-2410 Public exploit

    raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to c…

  • Unscored —
    CVE-2006-2406 Public exploit

    Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier v…

  • Unscored —
    CVE-2006-2412 Public exploit

    The raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to cause…

  • Unscored —
    CVE-2006-2411 Public exploit

    Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote att…

  • Unscored —
    CVE-2006-2401 Public exploit

    The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of …

  • Unscored —
    CVE-2006-2396 Public exploit

    Cross-site scripting (XSS) vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the …

  • Unscored —
    CVE-2006-2392 Public exploit

    PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8…

  • Unscored —
    CVE-2006-2400 Public exploit

    The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of …

  • Unscored —
    CVE-2006-2398 Public exploit

    Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2006-2395 Public exploit

    PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto St…

  • Unscored —
    CVE-2006-2393 Public exploit

    The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application c…

  • Unscored —
    CVE-2006-2404 Public exploit

    Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2006-2402 Public exploit

    Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote at…

  • Unscored —
    CVE-2006-2399 Public exploit

    Stack-based buffer overflow in the ServerNetworking::incoming_client_data function in servnet.cpp in Outgun 1.0.3 bot 2…

  • Unscored —
    CVE-2006-2390 Public exploit

    Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2006-2397 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-2369 Public exploit EPSS 92%

    RealVNC 4.1.1, and other products that use RealVNC such as AdderLink IP and Cisco CallManager, allows remote attackers …

  • Unscored —
    CVE-2006-2361 Public exploit

    PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as u…

  • Unscored —
    CVE-2006-2363 Public exploit

    SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute …

  • Unscored —
    CVE-2006-2365 Public exploit

    Cross-site scripting (XSS) vulnerability in a_login.php in Vizra allows remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2006-2359 Public exploit

    Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arb…

  • High 7.3
    CVE-2006-2362 Public exploit EPSS 14%

    Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GN…

  • Unscored —
    CVE-2006-2360 Public exploit

    SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-4799 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earlier allow re…

  • Unscored —
    CVE-2006-2351 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006…

  • Unscored —
    CVE-2006-2341 Public exploit

    The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being u…

  • Unscored —
    CVE-2006-2339 Public exploit

    SQL injection vulnerability in index.php in evoTopsites 2.x and evoTopsites Pro 2.x allows remote attackers to execute …

  • Unscored —
    CVE-2006-2331 Public exploit

    Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbit…

  • Unscored —
    CVE-2006-2315 Public exploit

    PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2006-2323 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to …

  • Unscored —
    CVE-2006-2316 Public exploit

    S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memor…

  • Unscored —
    CVE-2006-2334 Public exploit

    The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly c…

  • Unscored —
    CVE-2006-2336 Public exploit

    SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-2330 Public exploit

    PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated use…

  • Unscored —
    CVE-2006-2300 Public exploit

    Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1…

  • Unscored —
    CVE-2006-2306 Public exploit

    Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-2297 Public exploit EPSS 20%

    Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to ex…

  • Unscored —
    CVE-2006-2296 Public exploit

    SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute ar…