Archive
May 2006
Vulnerabilities first published in this month (UTC), newest first.
609 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remot…
-
Unscored —CVE-2006-2650 Public exploit
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users t…
-
Unscored —
The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// req…
-
Unscored —
useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to…
-
Unscored —
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set o…
-
Unscored —
phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the p…
-
Unscored —
Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbit…
-
Unscored —CVE-2006-2629 Public exploit
Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of…
-
Unscored —
Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory …
-
Unscored —
Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts …
-
Unscored —CVE-2006-2608 Public exploit
artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modif…
-
Unscored —
Cross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in MediaWiki 1.6.x before r1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory …
-
Unscored —
ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain p…
-
Unscored —
SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Di…
-
Unscored —
artmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows remote attackers to mod…
-
Unscored —
Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, whi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to inject arbitrary web s…
-
Unscored —
Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1…
-
Unscored —
(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the i…
-
Unscored —
Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers,…
-
Unscored —
do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local us…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to injec…
-
Unscored —CVE-2006-2587 Public exploit
Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products inclu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to in…
-
Unscored —
SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands vi…
-
High —
Remote code execution in rwiki
The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in post.php in SkyeBox 1.2.0 allow remote attackers to inject arbit…
-
Unscored —
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause…
-
Unscored —
Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, w…
-
Unscored —
SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-2583 Public exploit
PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attac…
-
Unscored —
Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension.…
-
Unscored —
SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown …
-
Unscored —
Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exp…
-
Unscored —
Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004…