CVEs published in January 2006
382 vulnerabilities, 43 critical, 0 exploited.
- elido face control Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote... 5.0 Medium
- cisco vpn 3000 concentrator series software, vpn 3030 concentator +1 more Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers... 7.8 High
- linux kernel Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to... 2.1 Low
- greg roelofs libpng Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent... 5.0 Medium
- spaiz spaiz-nuke cms Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote... 4.3 Medium
- pmwiki pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to... 4.3 Medium
- cre loaded loaded CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and... 7.5 High
- git Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute... 7.5 High
- nullsoft winamp Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a... 7.6 High
- theworldsend.net php-ping PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a... 5.0 Medium
- shareaza Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code... 7.5 High
- my little homepage little weblog Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little... 4.3 Medium
- my little homepage little guestbook Cross-site scripting (XSS) vulnerability in guestbook.php in my little homepage my little... 4.3 Medium
- my little homepage little forum Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little... 4.3 Medium
- mybulletinboard Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows... 4.3 Medium
- pioneers Unspecified vulnerability in Pioneers (formerly gnocatan) before 0.9.49 allows remote attackers... 5.0 Medium
- suse linux Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1... 4.6 Medium
- xpdf Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, ... 7.5 High
- uebimiau Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows... 4.3 Medium
- stalker communigate pro CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service ... 7.5 High
- goldstag content management system Cross-site scripting (XSS) vulnerability in search.asp in Goldstag Content Management System... 4.3 Medium
- active121 site manager Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager... 4.3 Medium
- ideosoft design ideocontent manager Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers... 7.5 High
- ideosoft design ideocontent manager Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject... 4.3 Medium
- andonet blog SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers... 7.5 High
- pmachine expressionengine Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows... 4.3 Medium
- microsoft internet explorer, ie +1 more Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit... 7.5 High
- phpbb group phpbb phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash)... 5.0 Medium
- e-post corporation mail server, spa-pro mail atsolomon +1 more Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05... 5.0 Medium
- e-post corporation mail server, spa-pro mail atsolomon +1 more Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the... 7.5 High
- e-post corporation mail server, smtp server, spa-pro mail atsolomon +2 more Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote... 7.5 High
- webwork Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to... 6.5 Medium
- phpclanwebsite index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation... 4.0 Medium
- phpclanwebsite SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote... 6.8 Medium
- cheesyblog Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers... 4.3 Medium
- mybb Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02... 4.3 Medium
- karjasoft sami ftp server Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary... 7.5 High
- text rider rider Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a... 5.0 Medium
- text rider rider Text Rider 2.4 stores sensitive data in the data directory under the web document root with... 5.0 Medium
- hp hp-ux Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain... 7.2 High
- oracle application server, http server +1 more Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10... 7.5 High
- phpxplorer Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read... 5.0 Medium
- bea weblogic server Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator... 2.1 Low
- bea weblogic server Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted... 2.1 Low
- bea weblogic server Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0... 5.0 Medium
- bea weblogic server BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even... 2.1 Low
- oracle weblogic portal Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services... 7.5 High
- bea weblogic server Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5... 2.1 Low
- bea weblogic server BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled... 7.5 High
- oracle weblogic portal BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment... 5.0 Medium
- Show olderLoading…