Archive
28 June 2006
Vulnerabilities first published on this day (UTC), newest first.
24 results · Feed
-
Unscored —
The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge…
-
Unscored —
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded u…
-
Unscored —CVE-2006-3292 Public exploit
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51…
-
Unscored —
HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information un…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System …
-
Unscored —
Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "roo…
-
Unscored —CVE-2006-3276 EPSS 14%
Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitra…
-
Unscored —
Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information …
-
Unscored —CVE-2006-3271 Public exploit
Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)…
-
Unscored —CVE-2006-3277 Public exploit
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier …
-
Unscored —
Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrar…
-
Unscored —CVE-2006-3269 Public exploit
PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execu…
-
Unscored —
SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands…
-
Unscored —
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web scri…
-
Unscored —
requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request…
-
Unscored —
SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attack…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct ac…