CVEs published in March 2006
542 vulnerabilities, 23 critical, 1 exploited.
- csdoom 2005Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom ...7.8 High
- csdoomBuffer overflow in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to (1)...7.5 High
- php lite calendar expressMultiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow...4.3 Medium
- metisware instructorCross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor...4.3 Medium
- php lite meeting reserveCross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows...4.3 Medium
- sixal g-bookCross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers...4.3 Medium
- phpadsnew, phppgads +1 moreMultiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0...4.3 Medium
- veritas netbackupBuffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0...7.1 High
- veritas netbackupStack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup...9.0 High
- veritas netbackupStack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise...9.0 High
- westes flexflex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33...7.5 High
- cholod mysql based message boardMultiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow...4.3 Medium
- cholod mysql based message boardSQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers...7.5 High
- university of washington pubcookieMultiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka...4.3 Medium
- university of washington pubcookieMultiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application...4.3 Medium
- university of washington pubcookieMultiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in...4.3 Medium
- twikiTWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit...4.0 Medium
- twikiThe (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings,...7.5 High
- pablo software solutions baby asp web server, quick and easy web server +1 moreThe (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote...5.0 Medium
- gentoo linuxThe configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM...4.6 Medium
- hp hp-uxUnspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote...7.8 High
- microsoft ie, internet explorer +1 moreUnspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute...7.5 High
- kismacStack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54...5.1 Medium
- ibm tivoli business systems managerCross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli...4.3 Medium
- pablo software solutions baby ftp serverDirectory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated...4.0 Medium
- jelsoft impexPHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74,...7.5 High
- trend micro officescanTrend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for...10.0 High
- trendmicro interscan messaging security suiteISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and...7.2 High
- trend micro pc-cillin 2006Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for...7.2 High
- orionserver orion application serverOrion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain...5.0 Medium
- counterpane password safePasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C+...4.9 Medium
- comoblog project comoblog, easymoblog +1 moreCross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1...4.3 Medium
- debian linuxThe installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian...2.1 Low
- brain book software admanAdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank...5.0 Medium
- brain book software admanSQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote...7.5 High
- php live liveCross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote...4.3 Medium
- benson it solutions 1webcalendarMultiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to...5.0 Medium
- xhp cmsLaurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users...9.0 High
- realnetworks realone player, realplayer +1 moreBuffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10,...9.3 High
- invision power services power boardCross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before...6.8 Medium
- linux kernelBuffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows...10.0 High
- motorola pebl u6, v600 +1 moreThe Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other...6.8 Medium
- motorola pebl u6Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones,...7.8 High
- motorola e398, pebl u6, v600 +2 moreThe Motorola PEBL U6, the Motorola V600, and possibly the Motorola E398 and other Motorola phones...5.0 Medium
- realnetworks helix player, realone player, realplayer +1 more +3 moreBuffer overflow in swfformat.dll in multiple RealNetworks products and versions including...9.3 High
- freebsdopiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1...7.2 High
- microsoft asp.netMicrosoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used...7.5 High
- justin white freewpsimages.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote...7.5 High
- mini-nuke cmsMultiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote...7.5 High
- oswikiCross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject...4.3 Medium
- Show moreLoading…