CVEs published in January 2006
382 vulnerabilities, 43 critical, 0 exploited.
- sun solarisUnspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null...4.9 Medium
- sun solarisUnspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain...7.2 High
- estara softphoneBuffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute...7.5 High
- microsoft visual studio .netBy design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user...5.1 Medium
- php-nuke news module, pool module +1 moreMultiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke...5.0 Medium
- mainenet enterprises asptopsitesMultiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary...7.5 High
- acal calendar projectDirect static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows...6.5 Medium
- acal calendar projectlogin.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by...7.5 High
- cisco cs-marsCisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an...7.2 High
- calogic calendarsCross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to...4.3 Medium
- cisco ip phone 7940The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large...5.0 Medium
- cray unicosFormat string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown...7.2 High
- cray unicosMultiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1...7.2 High
- xmameBuffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11...7.2 High
- webwiz web wiz forumsCross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote...4.3 Medium
- hummingbird collaboration, enterprise collaboration +1 moreHummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows...4.0 Medium
- hummingbird enterprise collaborationHummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows...4.0 Medium
- hummingbird enterprise collaborationCross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration...3.5 Low
- orjinweb e-commercePHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers...7.5 High
- myphpimaddresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers...7.5 High
- myphpimCross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject...4.3 Medium
- myphpimSQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL...7.5 High
- symantec norton system worksSymantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of...7.5 High
- plain black webguiCross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black...4.3 Medium
- woah-projekt phgstatsphgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote...7.5 High
- francisco burzi php-nuke evSQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1...7.5 High
- freebsdThe ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not...2.1 Low
- freebsdThe ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service ...5.0 Medium
- linux kernelThe netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users...4.9 Medium
- microsoft windows 2000, windows 98, windows me +4 more +6 moreHeap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and...9.3 High
- microsoft office, outlook, exchange server +2 moreUnspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5...7.5 High
- microsoft windows 2000, windows 2003 server, windows 98 +3 more +5 moreAn unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on...9.3 High
- postgresqlPostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote...5.0 Medium
- clam anti-virus clamavHeap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows...7.5 High
- sun solaris, sunos +1 moreUnspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. ...4.6 Medium
- venom board boardSQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to...7.5 High
- javier suarez sanz foro domusSQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute...7.5 High
- cyberdoc sitesuite cmsSQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to...7.5 High
- reamday enterprises magic news plussettings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the...5.0 Medium
- foxrumCross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject...4.3 Medium
- 427bb fourtwosevenbbCross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote...4.3 Medium
- 427bb fourtwosevenbbSQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to...7.5 High
- 427bb fourtwosevenbb427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and...7.5 High
- phpchamberCross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote...4.3 Medium
- todd miller sudo, ubuntu linux +1 moresudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows...7.2 High
- dave carrigan auth ldapMultiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1...7.5 High
- simpbookCross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default),...4.3 Medium
- netsarang xlpdNetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large...5.0 Medium
- john lim adodb, mantis, moodle +2 more +4 moreDynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4...7.5 High
- john lim adodb, mantis, mediabeez +3 more +5 moreThe server.php test script in ADOdb for PHP before 4.70, as used in multiple products including ...7.5 High
- Show moreLoading…