CVEs published in January 2006
382 vulnerabilities, 43 critical, 0 exploited.
- linux kerneldm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which...2.1 Low
- rockliffe mailsiteCross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and...4.3 Medium
- phpbb group phpbbCross-site scripting (XSS) vulnerability in phpBB 2.0.19, when "Allowed HTML tags" is enabled,...4.3 Medium
- oaboardPHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to...7.5 High
- ecardmax.com atcard me phpCross-site scripting (XSS) vulnerability in index.php in @Card ME PHP allows remote attackers to...4.3 Medium
- open-xchangeCross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with ...4.3 Medium
- idv directory viewer directory viewerDirectory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows...5.0 Medium
- esri arcpadBuffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service ...5.0 Medium
- intouchSQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to...7.5 High
- lizard cart cmsSQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows...7.5 High
- next generation image gallery generation image galleryCross-site scripting vulnerability in index.php in Next Generation Image Gallery 0.0.1 Lite...5.0 Medium
- nkadsSQL injection vulnerability in Nkads 1.0 alfa 3 allows remote attackers to execute arbitrary SQL...7.5 High
- rasmpCross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote...5.0 Medium
- imagemagickFormat string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and...5.1 Medium
- intel graphics accelerator driverialmnt5.sys in the ialmrnt5 display driver in Intel Graphics Accelerator Driver 6.14.10.4308...7.8 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in vBulletin 3.5.2, and possibly earlier versions,...4.3 Medium
- scoznet scozbookSQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to...7.5 High
- haddad said b-net softwareMultiple cross-site scripting (XSS) vulnerabilities in B-net Software 1.0 allow remote attackers...4.3 Medium
- richard dawe file extattrOff-by-one error in the getfattr function in File::ExtAttr before 0.03 allows attackers to...2.1 Low
- oaboardPHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to...7.5 High
- gnu phpbookDirect static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers...7.5 High
- jevontech phpenpalsSQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute...7.5 High
- discusware discus freeware, discus professional +1 moreCross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3...4.3 Medium
- sco openserverBuffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary...7.5 High
- gentoo linux, app-crypt pinentry +1 moreThe ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs,...6.6 Medium
- drupal** DISPUTED ** Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via...4.3 Medium
- chipmunk scripts guestbookCross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier...4.3 Medium
- primo place cartSQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute...7.5 High
- vego links builderSQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote...7.5 High
- phpjournalerSQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute...7.5 High
- vego web forumSQL injection vulnerability in (1) functions.php, (2) functions_update.php, and (3)...7.5 High
- devellion cubecartPHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote...7.5 High