Skip to content
OpenAdvisories

Archive

May 2006

Vulnerabilities first published in this month (UTC), newest first.

← April 2006 2006 / May June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

609 results · Feed

  • Unscored —
    CVE-2006-2283

    Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to e…

  • Unscored —
    CVE-2006-2277 Public exploit

    Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2006-2295 Public exploit

    Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absol…

  • Unscored —
    CVE-2006-2293 Public exploit

    SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-2291

    Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2006-2289

    Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors.

    avahi Debian
  • Unscored —
    CVE-2006-0027 Public exploit EPSS 78%

    Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages w…

  • Unscored —
    CVE-2006-2275

    Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of…

  • Unscored —
    CVE-2006-2274

    Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) v…

  • Unscored —
    CVE-2005-4798

    Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a deni…

  • Unscored —
    CVE-2006-2042

    Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion,…

  • Unscored —
    CVE-2006-2271

    The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kern…

  • Unscored —
    CVE-2006-2272

    Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP f…

  • Unscored —
    CVE-2006-0515 Public exploit EPSS 10%

    Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) an…

  • Unscored —
    CVE-2006-1172 Public exploit EPSS 15%

    Stack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control 1.1.0.0 allows remote …

  • Unscored —
    CVE-2006-2266

    SQL injection vulnerability in Chirpy! 0.1 allows remote attackers to execute arbitrary SQL commands via unspecified pa…

  • Unscored —
    CVE-2006-2249 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, al…

  • Unscored —
    CVE-2006-2260

    Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote att…

  • Unscored —
    CVE-2006-2255 Public exploit

    Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2006-2262 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-2256 Public exploit

    PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2006-2257

    Cross-site scripting (XSS) vulnerability in index.php in easyEvent 1.2 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-2242 Public exploit

    acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) c…

  • Unscored —
    CVE-2006-2269 Public exploit

    Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-2270 Public exploit EPSS 14%

    PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-2240

    Unspecified vulnerability in the (1) web cache or (2) web proxy in Fujitsu NetShelter/FW allows remote attackers to cau…

  • Unscored —
    CVE-2006-2268

    SQL injection vulnerability in FlexCustomer 0.0.4 and earlier allows remote attackers to bypass authentication and exec…

  • Unscored —
    CVE-2006-2254 Public exploit

    Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application cras…

  • Unscored —
    CVE-2006-2264 Public exploit

    Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2265 Public exploit

    Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to in…

  • Unscored —
    CVE-2006-2259

    SQL injection vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-2267

    Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unkno…

  • Unscored —
    CVE-2006-2261 Public exploit

    PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2006-2247

    WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which al…

  • Unscored —
    CVE-2006-2241 Public exploit

    PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-2250

    CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1) /inc/show.inc.php or…

  • Unscored —
    CVE-2006-2248

    Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests contai…

  • Unscored —
    CVE-2006-2239

    SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-2161

    Buffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0 and 4.3, and possibly…

  • Unscored —
    CVE-2006-2246

    Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web sc…