Archive
May 2006
Vulnerabilities first published in this month (UTC), newest first.
199 results · Clear filters · Feed
-
Unscored —CVE-2006-2294 Public exploit
Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2006-2280 Public exploit
Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list a…
-
Unscored —CVE-2006-2285 Public exploit
PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-2284 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2006-2277 Public exploit
Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (applica…
-
Unscored —CVE-2006-2295 Public exploit
Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absol…
-
Unscored —CVE-2006-2293 Public exploit
SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages w…
-
Unscored —
Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) an…
-
Unscored —
Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote …
-
Unscored —CVE-2006-2249 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, al…
-
Unscored —CVE-2006-2255 Public exploit
Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-2262 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-2256 Public exploit
PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to exec…
-
Unscored —CVE-2006-2242 Public exploit
acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) c…
-
Unscored —CVE-2006-2269 Public exploit
Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arb…
-
Unscored —
PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arb…
-
Unscored —CVE-2006-2254 Public exploit
Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application cras…
-
Unscored —CVE-2006-2264 Public exploit
Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-2265 Public exploit
Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to in…
-
Unscored —CVE-2006-2261 Public exploit
PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2006-2241 Public exploit
PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to…
-
Unscored —CVE-2006-2263 Public exploit
SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-2245 Public exploit
PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attac…
-
Unscored —CVE-2006-2252 Public exploit
Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-2253 Public exploit
PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execut…
-
Unscored —
The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbi…
-
Unscored —CVE-2006-2236 Public exploit
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III…
-
Unscored —
Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers t…
-
Unscored —CVE-2006-2233 Public exploit
Buffer overflow in BankTown Client Control (aka BtCxCtl20Com) 1.4.2.51817, and possibly 1.5.2.50209, allows remote atta…
-
Unscored —
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows …
-
Unscored —CVE-2006-2222 Public exploit
Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-2228 Public exploit
Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-2230 Public exploit
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of …
-
Unscored —CVE-2006-2225 Public exploit
Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, proba…
-
Unscored —
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) r…
-
Unscored —CVE-2006-2226 Public exploit
Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of ser…
-
Unscored —
Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to e…
-
Unscored —
The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 a…
-
Unscored —CVE-2006-2210 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbi…