Archive
May 2006
Vulnerabilities first published in this month (UTC), newest first.
609 results · Feed
-
Unscored —CVE-2006-2263 Public exploit
SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-2245 Public exploit
PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attac…
-
Unscored —
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary w…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrar…
-
Unscored —
Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-2252 Public exploit
Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-2253 Public exploit
PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execut…
-
Unscored —
The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbi…
-
Unscored —CVE-2006-2236 Public exploit
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III…
-
Unscored —
Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers t…
-
Unscored —
Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files v…
-
Unscored —
Unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, as shipped with the Ja…
-
Unscored —CVE-2006-2233 Public exploit
Buffer overflow in BankTown Client Control (aka BtCxCtl20Com) 1.4.2.51817, and possibly 1.5.2.50209, allows remote atta…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web …
-
Unscored —
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows …
-
Unscored —CVE-2006-2222 Public exploit
Buffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-2228 Public exploit
Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary w…
-
Unscored —
CodeMunkyX (aka free-php.net) Simple Poll 1.0, when authentication is not required for the admin directory, allows remo…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook Script 1.02 and earlier …
-
Unscored —
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a clea…
-
Unscored —CVE-2006-2230 Public exploit
Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers to cause a denial of …
-
Unscored —
Cross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-2225 Public exploit
Buffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute arbitrary code, proba…
-
Unscored —
A third-party installer generation tool, possibly BitRock InstallBuilder, as used in products including Process-one eja…
-
Unscored —
RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1) disable RIPv1 or (2) r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-2226 Public exploit
Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of ser…
-
Unscored —
sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain …
-
Unscored —
Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to e…
-
Unscored —
The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 a…
-
Unscored —
The selinux_ptrace logic in hooks.c in SELinux for Linux 2.6.6 allows local users with ptrace permissions to change the…
-
Unscored —CVE-2006-2210 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbi…
-
Unscored —
Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web server via an invalid pfo…
-
Unscored —CVE-2006-2217 Public exploit
SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Pow…
-
Unscored —
Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a …
-
Unscored —
Hostapd 0.3.7-2 allows remote attackers to cause a denial of service (segmentation fault) via an unspecified value in t…
-
Unscored —CVE-2006-2209 Public exploit
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbi…
-
Unscored —
The audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audi…