Skip to content
OpenAdvisories

Archive

28 June 2006

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge…

  • Unscored —

    The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded u…

  • Unscored —
    CVE-2006-3292 Public exploit

    SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —

    Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51…

  • Unscored —

    HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information un…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System …

  • Unscored —

    Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "roo…

  • Unscored —
    CVE-2006-3276 EPSS 14%

    Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-3280 Public exploit EPSS 56%

    Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information …

  • Unscored —
    CVE-2006-3271 Public exploit

    Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)…

  • Unscored —
    CVE-2006-3277 Public exploit

    The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML…

  • Unscored —

    Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2006-3269 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execu…

  • Unscored —

    SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands…

  • Unscored —

    The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented,…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web scri…

  • Unscored —

    requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request…

  • Unscored —

    SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2006-3281 Public exploit EPSS 48%

    Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attack…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct ac…