CVEs published in April 2006
576 vulnerabilities, 42 critical, 0 exploited.
- resmgr resmgrd resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to... 3.6 Low
- oce north america 3122 printer, 3121 printer +1 more parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service ... 7.8 High
- bl4 smtp server Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of... 7.5 High
- edgewall software trac Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows... 4.3 Medium
- jupiter cms cms Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote... 5.0 Medium
- kmail Multiple cross-site scripting (XSS) vulnerabilities in Kamgaing Email System (kmail) 2.3 and... 6.8 Medium
- mybulletinboard SQL injection vulnerability in MyBB (MyBulletinBoard) 1.1.1 allows remote authenticated... 2.1 Low
- poweriso Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary... 7.8 High
- winiso computing winiso Directory traversal vulnerability in WinISO 5.3 allows remote attackers to write arbitrary files... 5.0 Medium
- magic iso maker iso maker Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write... 7.8 High
- ezb systems ultraiso Directory traversal vulnerability in UltraISO 8.0.0.1392 allows remote attackers to write... 5.0 Medium
- php thumbnail autoindex thumbnail autoindex PHP remote file inclusion vulnerability in Thumbnail AutoIndex before 2.0 allows remote attackers... 7.5 High
- invision power services power board SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote... 7.5 High
- neocrome land down under plug.php in Land Down Under (LDU) 802 and earlier allows remote attackers to obtain sensitive... 5.0 Medium
- phex Phex before 2.8.6 allows remote attackers to cause a denial of service (application hang) by... 5.0 Medium
- microsoft ie, internet explorer +1 more Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack... 5.1 Medium
- nessus Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of... 2.6 Low
- hp storageworks secure path windows Unspecified vulnerability in HP StorageWorks Secure Path for Windows 4.0C-SP2 before 20060419... 5.0 Medium
- vwar virtual war admin.php in Virtual War (VWar) 1.5 and versions before 1.2 allows remote attackers to obtain... 5.0 Medium
- mysmartbb Multiple SQL injection vulnerabilities in misc.php in MySmartBB 1.1.x allow remote attackers to... 7.5 High
- mysmartbb Multiple cross-site scripting (XSS) vulnerabilities in misc.php in MySmartBB 1.1.x allow remote... 4.3 Medium
- devsyn open bulletin board Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6... 4.3 Medium
- hitachi groupmax integrated desktop, groupmax mail, groupmax world wide web +1 more +3 more The Gmax Mail client in Hitachi Groupmax before 20060426 allows remote attackers to cause a... 5.0 Medium
- juniper junipersetup control Buffer overflow in JuniperSetupDLL.dll, loaded from JuniperSetup.ocx by the Juniper SSL-VPN... 7.5 High
- speedproject speedcommander, squeez +1 more Multiple buffer overflows in (1) CxAce60.dll and (2) CxAce60u.dll in SpeedProject Squeez 5.10... 5.1 Medium
- farsinews Multiple cross-site scripting (XSS) vulnerabilities in FarsiNews 2.5.3 Pro and earlier allow... 4.3 Medium
- andrew tridgell rsync Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for... 7.5 High
- oracle database server Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the... 4.6 Medium
- verosky media instant photo gallery SQL injection vulnerability in portfolio_photo_popup.php in Verosky Media Instant Photo Gallery 1... 6.8 Medium
- verosky media instant photo gallery Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery,... 4.3 Medium
- furukawa electric fitelnet, mucho-ev pk +1 more Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80,... 7.8 High
- pdnsd Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact and attack vectors. NOTE:... 10.0 High
- pdnsd Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of... 5.0 Medium
- don moore mydns Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via... 5.0 Medium
- juniper junose Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown... 10.0 High
- isc bind Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a... 5.0 Medium
- delegate Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow... 5.0 Medium
- linux kernel Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify... 2.1 Low
- mybb devbb Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote... 4.3 Medium
- powerdns The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service ... 5.0 Medium
- hitachi jp1-cm2-network node manager, jp1-cm2-network node manager 250, jpi automatic job management system 2 +6 more +8 more Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of... 5.0 Medium
- mkportal SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5... 7.5 High
- mkportal Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and earlier,... 4.3 Medium
- phpsurveyor SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers... 7.5 High
- sun solaris Unspecified vulnerability in the libpkcs11 library in Sun Solaris 10 might allow local users to... 4.6 Medium
- leadhound network full, lite +1 more Multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1, and probably... 6.8 Medium
- leadhound network full, lite +1 more Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network... 6.4 Medium
- invision power services board, power board +1 more SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2... 5.0 Medium
- invision power services power board Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board ... 6.4 Medium
- invision power services power board action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows... 5.0 Medium
- Show olderLoading…