CVEs published in March 2006
542 vulnerabilities, 23 critical, 1 exploited.
- runitchpst in runit 1.3.3-1 for Debian GNU/Linux, when compiled on little endian i386 machines against...6.2 Medium
- daniel stenberg curlHeap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to...7.5 High
- symantec veritas backup execFormat string vulnerability in the Job Engine service (bengine.exe) in the Media Server in...4.6 Medium
- symantec veritas backup exec, backup exec remote agent +1 moreUnspecified vulnerability in Veritas Backup Exec for Windows Server Remote Agent 9.1 through 10.1...5.0 Medium
- beagle-project beagleUntrusted search path vulnerability in Beagle 0.2.2.1 might allow local users to gain privileges...7.5 High
- spipCross-site scripting (XSS) vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote...4.3 Medium
- knowledgebasepublisherPHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows...7.5 High
- astalavista it engineering contrexxCross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows...4.3 Medium
- php icalendar icalendarDirectory traversal vulnerability in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier allows...5.0 Medium
- php icalendar icalendarpublish.ical.php in Jim Hu and Chad Little PHP iCalendar 2.21 and earlier does not require...7.5 High
- milkeyway captive portalMultiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1...4.3 Medium
- milkeyway captive portalMultiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote...7.5 High
- invision power services power boardMultiple SQL injection vulnerabilities in Invision Power Board (IPB) 2.0.4 and 2.1.4 before...7.5 High
- invision power services power boardCross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.0.4 and 2.1.4 before...5.8 Medium
- symantec ghost solutions suite, norton ghost +1 moreBuffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2,...2.1 Low
- symantec ghost solutions suite, norton ghost +1 moreSQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0,...3.2 Low
- symantec ghost solutions suite, norton ghost +1 moreThe installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost...4.6 Medium
- mybulletinboardCRLF injection vulnerability in inc/function.php in MyBulletinBoard (MyBB) 1.04 allows remote...4.3 Medium
- mybulletinboardCross-site scripting (XSS) vulnerability in member.php in MyBulletinBoard (MyBB) 1.04 allows...3.5 Low
- sherzod ruzmetov cgi sessionCGI::Session 4.03-1 does not set proper permissions on temporary files created in (1) Driver:...7.5 High
- sherzod ruzmetov cgi sessionCGI::Session 4.03-1 allows local users to overwrite arbitrary files via a symlink attack on...5.0 Medium
- upoint \@1 file storeSQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute...6.8 Medium
- upoint at1 file storeCross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote...5.8 Medium
- himpfen consulting php simplenewsadmin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass...10.0 High
- ggz gaming zone gaming zoneGGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect)...5.0 Medium
- avira antivir personalClassic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing...7.2 High
- mozilla firefox** DISPUTED ** Mozilla Firefox 1.0.7 and 1.5.0.1 allows remote attackers to cause a denial of...7.8 High
- mybulletinboardMultiple cross-site scripting (XSS) vulnerabilities in member.php in MyBulletin Board (MyBB) 1.0...4.3 Medium
- oxynewsSQL injection vulnerability in index.php in OxyNews allows remote attackers to execute arbitrary...7.5 High
- inprotectMultiple cross-site scripting (XSS) vulnerabilities in zones.php in Inprotect 0.21 allow remote...3.5 Low
- rahul dhesi zooBuffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute...6.2 Medium
- funkwerk x2300The Internet Key Exchange implementation in Funkwerk X2300 7.2.1 allows remote attackers to cause...7.8 High
- invision power services power boardInvision Power Board 2.1.4 allows remote attackers to hijack sessions and possibly gain...5.1 Medium
- virtual communication services vpmi enterpriseCross-site scripting (XSS) vulnerability in Service_Requests.asp in VPMi Enterprise 3.3 allows...4.3 Medium
- xhawk.net discussionSQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows...7.5 High
- xhawk.net discussionCross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote...4.3 Medium
- wordpressMultiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow...4.3 Medium
- aspportalMultiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors.7.5 High
- aspportalMultiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to...4.3 Medium
- hordeHorde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null...5.0 Medium
- maian supportMultiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute...7.5 High
- phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject...4.3 Medium
- microsoft commerce serverThe sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow...7.5 High
- skullsplitter php guestbookCross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP...2.6 Low
- mercur messagingStack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows...10.0 High
- borderware mxtremeUnspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an...10.0 High
- glftpdUnspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks...7.5 High
- light weight calendar weight calendarEval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote...7.5 High
- sa-eximArgument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to...5.0 Medium
- amax information technologies winmailUnspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and...10.0 High
- Show moreLoading…