CVEs published in March 2006
542 vulnerabilities, 23 critical, 1 exploited.
- apple itunes, quicktime +1 moreInteger overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows...6.8 Medium
- hp hp-uxUnspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with...4.6 Medium
- ibm aixUnspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute...7.2 High
- microsoft ieBuffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other...7.5 High
- adobe document server, graphics server +1 moreAdobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6...2.6 Low
- alexander palmo simple php blogDirectory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier...7.5 High
- linux kernelThe ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID...5.0 Medium
- firebirdsql firebirdFirebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid...4.6 Medium
- firebirdsql firebirdBuffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731...4.6 Medium
- countersoft geminiCross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote...4.3 Medium
- dsportal dsloginSQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote...5.1 Medium
- dsportal dsnewsletterMultiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow...7.5 High
- macromedia flash playerMultiple unspecified vulnerabilities in Adobe Flash Player 8.0.22.0 and earlier allow remote...5.1 Medium
- crossfireBuffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote...7.5 High
- david ravenscroft hithostDirectory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote...5.0 Medium
- microsoft officeStack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3...5.1 Medium
- microsoft excel, office +1 moreUnspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3...5.1 Medium
- microsoft excel, office +1 moreUnspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3...5.1 Medium
- microsoft excel, office +1 moreUnspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3...5.1 Medium
- microsoft office, works +1 moreBuffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows...5.1 Medium
- dsportal dscounterSQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows...5.1 Medium
- mikael software wmnewsMultiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject...4.3 Medium
- dsportal dsdownloadMultiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow...7.5 High
- julian pawlowski capi4hylafaxCAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify...1.2 Low
- belchior foundry vcardMultiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote...4.3 Medium
- hosting controller controllerSQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote...7.5 High
- drupalSession fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote...5.1 Medium
- drupalDrupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item,...4.6 Medium
- drupalCross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8...4.3 Medium
- drupalCRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote...5.0 Medium
- guppyDirectory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to...2.6 Low
- jupiter cms cmsCross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows...4.3 Medium
- zeroboardMultiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote...4.3 Medium
- zonelabs zonealarm security suiteUntrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm...6.2 Medium
- apple mac os x, mac os x server +1 moreCoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin...7.5 High
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up...7.5 High
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up...7.5 High
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up...7.5 High
- apple mac os x, mac os x server +1 moreBuffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update...5.1 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users...4.6 Medium
- gallery project galleryDirectory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows...5.0 Medium
- novell bordermanagerUnspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote...5.0 Medium
- dsportal dspollSQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL...7.5 High
- runcmsCross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to...4.3 Medium
- woltlab burning boardCross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows...4.3 Medium
- linux kernelRace condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6...7.1 High
- unreal unrealircdUnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a...5.0 Medium
- jiro banner systemJiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to...7.5 High
- corenewsUnspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute...7.5 High
- micromuse netcool neusecureIBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections...7.5 High
- Show moreLoading…