CVEs published in March 2006

542 vulnerabilities, 23 critical, 1 exploited.

• debian linux Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an... CVE-2006-1566 4.6 MediumMarch 31, 2006
• debian linux Untrusted search path vulnerability in libgpib-perl 3.2.06-2 in Debian GNU/Linux includes an... CVE-2006-1565 4.6 MediumMarch 31, 2006
• debian linux Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux... CVE-2006-1564 Fix available 4.6 MediumMarch 31, 2006
• vscripts vbook Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V... CVE-2006-1563 7.6 HighMarch 31, 2006
• vscripts vbook Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz... CVE-2006-1562 6.8 MediumMarch 31, 2006
• vscripts vbook SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2... CVE-2006-1561 5.1 MediumMarch 31, 2006
• skintech phpnewsmanager Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to... CVE-2006-1560 7.5 HighMarch 31, 2006
• php script index SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL... CVE-2006-1559 7.5 HighMarch 31, 2006
• php script index Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote... CVE-2006-1558 6.8 MediumMarch 31, 2006
• skintech x-changer Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute... CVE-2006-1557 Public exploit 7.5 HighMarch 31, 2006
• al-caricatier Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5... CVE-2006-1556 Public exploit 6.8 MediumMarch 31, 2006
• tachyon vsns lemon VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected... CVE-2006-1555 7.5 HighMarch 31, 2006
• tachyon vsns lemon Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject... CVE-2006-1554 2.6 LowMarch 31, 2006
• tachyon vsns lemon SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with... CVE-2006-1553 5.1 MediumMarch 31, 2006
• apple imageio, mac os x, safari +1 more +3 more Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause... CVE-2006-1552 5.0 MediumMarch 31, 2006
• gnu mailman The attachment scrubber (Scrubber.py) in Mailman 2.1.5 and earlier, when using Python's library... CVE-2006-0052 Fix available 5.0 MediumMarch 31, 2006
• dia Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0... CVE-2006-1550 Fix available 7.6 HighMarch 30, 2006
• apache struts Cross-site scripting in Apache Struts CVE-2006-1548 Fix available 4.3 MediumMarch 30, 2006
• apache struts, struts 1 +1 more Improper Input Validation in Apache Struts CVE-2006-1547 In KEVFix available EPSS 54.6% 7.5 HighMarch 30, 2006
• apache struts Apache Struts vulnerable to Improper Input Validation CVE-2006-1546 Fix available 7.5 HighMarch 30, 2006
• samba The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in... CVE-2006-1059 Fix available 1.2 LowMarch 30, 2006
• vscripts vnews Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz)... CVE-2006-1545 9.0 HighMarch 30, 2006
• vscripts vnews Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz)... CVE-2006-1544 4.3 MediumMarch 30, 2006
• vscripts vnews Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote... CVE-2006-1543 Public exploit 7.5 HighMarch 30, 2006
• python Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0... CVE-2006-1542 Public exploit 3.7 LowMarch 30, 2006
• ezaspsite SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote... CVE-2006-1541 7.8 HighMarch 30, 2006
• microsoft office MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted... CVE-2006-1540 Public exploit EPSS 28.6% 9.3 HighMarch 30, 2006
• bsd-games tetris-bsd Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games... CVE-2006-1539 Fix available 7.5 HighMarch 30, 2006
• enova x-wall asic The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores... CVE-2006-1538 4.9 MediumMarch 30, 2006
• webcalendar Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a... CVE-2006-1537 5.0 MediumMarch 30, 2006
• phoetux.net phxcontacts Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow... CVE-2006-1536 Public exploit 7.5 HighMarch 30, 2006
• phoetux.net phxcontacts Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and... CVE-2006-1535 Public exploit 4.3 MediumMarch 30, 2006
• null news news Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary... CVE-2006-1534 7.5 HighMarch 30, 2006
• sourceworkshop newsletter SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote... CVE-2006-1533 7.5 HighMarch 30, 2006
• deltascripts php classifieds Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and... CVE-2006-1532 4.3 MediumMarch 30, 2006
• microsoft .net framework Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow... CVE-2006-1511 5.1 MediumMarch 30, 2006
• microsoft .net framework Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used... CVE-2006-1510 Public exploit EPSS 13.8% 4.0 MediumMarch 30, 2006
• hp hp-ux /sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully... CVE-2006-1509 4.9 MediumMarch 30, 2006
• mh software connect daily Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar... CVE-2006-1508 Public exploit 4.3 MediumMarch 30, 2006
• phpkit Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject... CVE-2006-1507 6.8 MediumMarch 30, 2006
• sun grid engine, n1 grid engine +1 more Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine 5.3 before 20060327 and N1... CVE-2006-1506 7.2 HighMarch 30, 2006
• basic analysis and security engine base base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when... CVE-2006-1505 5.0 MediumMarch 30, 2006
• arab portal portal Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal... CVE-2006-1504 Public exploit 5.1 MediumMarch 30, 2006
• vwar virtual war PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1... CVE-2006-1503 5.1 MediumMarch 30, 2006
• mplayer Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of... CVE-2006-1502 5.1 MediumMarch 30, 2006
• oneorzero SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute... CVE-2006-1501 Public exploit 7.5 HighMarch 30, 2006
• tilde cms SQL injection vulnerability in index.php in Tilde CMS 3.0 allows remote attackers to execute... CVE-2006-1500 7.5 HighMarch 30, 2006
• source workshop vcounter SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute... CVE-2006-1499 7.5 HighMarch 30, 2006
• mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote... CVE-2006-1498 Fix available 4.3 MediumMarch 30, 2006
• vihor vihordesign Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read... CVE-2006-1497 Public exploit 5.0 MediumMarch 30, 2006
• Show olderLoading…