Skip to content
OpenAdvisories

Archive

13 June 2006

Vulnerabilities first published on this day (UTC), newest first.

47 results · Feed

  • Unscored —
    CVE-2006-3009 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers …

  • Unscored —

    Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-0025 EPSS 49%

    Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary cod…

  • Unscored —
    CVE-2006-0022 EPSS 15%

    Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2,…

  • Unscored —
    CVE-2006-1303 EPSS 38%

    Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attacke…

  • Unscored —
    CVE-2006-1313 EPSS 29%

    Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me,…

  • Unscored —
    CVE-2006-1193 Public exploit EPSS 40%

    Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Ac…

  • Unscored —
    CVE-2006-2374 Public exploit

    The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 a…

  • Unscored —
    CVE-2006-2384 EPSS 19%

    Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing att…

  • Unscored —
    CVE-2006-2385 EPSS 20%

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote att…

  • Unscored —
    CVE-2006-2370 Public exploit EPSS 70%

    Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serv…

  • Unscored —
    CVE-2006-2378 EPSS 35%

    Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1…

  • Unscored —
    CVE-2006-2379 Public exploit EPSS 54%

    Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and ea…

  • Unscored —
    CVE-2006-2380 EPSS 18%

    Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows…

  • Unscored —
    CVE-2006-2382 EPSS 49%

    Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-2383 Public exploit EPSS 40%

    Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2006-2371 EPSS 23%

    Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 …

  • Unscored —
    CVE-2006-2373 Public exploit EPSS 29%

    The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 a…

  • Unscored —

    Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass…

  • Unscored —
    CVE-2006-2376 EPSS 41%

    Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML …

  • Unscored —
    CVE-2006-3006 Public exploit

    Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attacker…

  • Unscored —

    The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitra…

  • Unscored —

    details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid paramet…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary w…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkArticles 1.0 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-2998 Public exploit

    PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-2996 Public exploit

    PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject…

  • Unscored —

    Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers t…

  • Unscored —

    Multiple SQL injection vulnerabilities in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to exe…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2006-2995 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2006-2908 Public exploit

    The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows re…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arb…

  • Unscored —

    PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in OkScripts QuickLinks 1.1 allows remote attackers to inject ar…