Archive
May 2006
Vulnerabilities first published in this month (UTC), newest first.
609 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers…
-
Unscored —CVE-2006-2316 Public exploit
S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memor…
-
Unscored —
Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote …
-
Unscored —CVE-2006-2334 Public exploit
The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly c…
-
Unscored —
Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) 1.1.1 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2006-2336 Public exploit
SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute ar…
-
Unscored —CVE-2006-2330 Public exploit
PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated use…
-
Unscored —
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which al…
-
Unscored —
PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure lo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Jadu CMS allow remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2006-2300 Public exploit
Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1…
-
Unscored —CVE-2006-2306 Public exploit
Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary w…
-
Unscored —
SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90 SP2 and 4.91 SP2 allow r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary …
-
Unscored —
SQL injection vulnerability in admin_default.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to in…
-
Unscored —CVE-2006-0994 EPSS 22%
Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabine…
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote atta…
-
Unscored —
The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain dire…
-
Unscored —
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to ex…
-
Unscored —
Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfe…
-
Unscored —CVE-2006-0034 EPSS 32%
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed …
-
Unscored —
Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the r…
-
Unscored —CVE-2006-1184 EPSS 30%
Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 all…
-
Unscored —
bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a ce…
-
Unscored —CVE-2006-2296 Public exploit
SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute ar…
-
Unscored —
Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to …
-
Unscored —
SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-a…
-
Unscored —CVE-2006-2294 Public exploit
Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2006-2280 Public exploit
Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list a…
-
Unscored —CVE-2006-2285 Public exploit
PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PH…
-
Unscored —
X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to up…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject a…
-
Unscored —
Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mD…
-
Unscored —
Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-2284 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP c…
-
Unscored —
Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos…