CVEs published in March 2006
542 vulnerabilities, 23 critical, 1 exploited.
- phprpcEval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier...7.5 High
- igenus webmailconfig/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include...7.5 High
- freecivpackets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service ...5.0 Medium
- freebsd, openbsd openssh +1 moreOpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked...5.0 Medium
- linux kernelLinux kernel before 2.6.15.5, when running on Intel processors, allows local users to cause a...1.2 Low
- linux kernelThe Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client...2.1 Low
- linux kernelLinux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted...1.7 Low
- joomlaUnspecified vulnerability in mod_templatechooser in Joomla! 1.0.7 allows remote attackers to...5.0 Medium
- joomlaThe cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow...4.3 Medium
- joomlafeedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to...7.8 High
- joomlafeedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to...5.0 Medium
- jfacetsJFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request...7.5 High
- addsoft storebotCross-site scripting (XSS) vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows...6.8 Medium
- addsoft storebotSQL injection vulnerability in MgrLogin.asp in Addsoft StoreBot 2005 Professional allows remote...7.5 High
- hp system management homepageDirectory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on...5.0 Medium
- pehepe membership management systemPHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe...5.0 Medium
- pehepe membership management system, uyelik sistemi +1 moreCross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe...4.3 Medium
- johnny vegas vegas forumSQL injection vulnerability in forumlib.php in Johnny_Vegas Vegas Forum 1.0 allows remote...7.5 High
- ukiweb ukiboardCross-site scripting (XSS) vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to...4.3 Medium
- dci-designs dawaweenSQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to...7.5 High
- phpThe c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check...9.3 High
- microsoft internet explorerBuffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows...7.5 High
- phpArgument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with...6.4 Medium
- phpArgument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail...3.2 Low
- smartblogPHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote...7.5 High
- networkactiv web serverNetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted...5.0 Medium
- irssiThe DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and...5.0 Medium
- wordpressSQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows...7.5 High
- peters software lettermergerLetterMerger 1.2 stores user information in Access database files with insecure permissions,...2.1 Low
- crossfireBuffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled,...6.4 Medium
- raidenhttpdRaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP,...5.0 Medium
- lighttpdresponse.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote...5.0 Medium
- m4 project enigma-suiteM4 Project enigma-suite before 0.73.3 (Windows) has a default password of "nominal" for the ...4.6 Medium
- nathan landry n8cms sitesuite cmsMultiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers...5.8 Medium
- nathan landry n8cms sitesuite cmsMultiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute...7.5 High
- sendcardMultiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote...7.5 High
- cactusoft parodiaagencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive...6.4 Medium
- cactusoft parodiaCross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows...4.3 Medium
- netgear wgt624The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive...5.0 Medium
- netgear wgt624NETGEAR WGT624 Wireless DSL router has a default account of super_username "Gearguy" and...10.0 High
- lansuite lanparty intranet systemSQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2...5.0 Medium
- g2soft pentacle in-out boardMultiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote...10.0 High
- apple mac os x, mac os x server +1 moreStack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier,...6.4 Medium
- apple mac os xDirectory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4...1.7 Low
- apple mac os x, mac os x server +1 moreCross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10...2.6 Low
- apple mac os x, mac os x server +1 moreSafari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect...2.6 Low
- apple mac os x, mac os x server +1 moreFileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a...1.7 Low
- emc dantz retrospectEMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6...5.0 Medium
- microsoft windows 2000, windows nt, windows 2003 server +2 moreThe default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and...7.8 High
- isc bindThe default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server,...5.0 Medium
- Show moreLoading…