CVEs published in April 2006
576 vulnerabilities, 42 critical, 0 exploited.
- chipmunk scripts guestbookSQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to...7.5 High
- talentsoft web\+ shopCross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier...4.3 Medium
- cherokee httpdCross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote...4.3 Medium
- jupiter cms cmsJupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full...2.6 Low
- jupiter cms cmsCross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote...4.3 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote...4.3 Medium
- maxdev md-proMAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers...6.4 Medium
- maxdev md-proSQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro...6.4 Medium
- phpPHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and...2.1 Low
- linux kernelThe sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and...4.9 Medium
- phpwebgalleryMultiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers...2.6 Low
- phpwebgalleryCross-site scripting (XSS) vulnerability in search.php in PHPWebGallery 1.4.1 allows remote...2.6 Low
- phpThe copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and...2.1 Low
- phpDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass...2.6 Low
- phpCross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote...4.3 Medium
- eset software nod32 antivirusThe GUI (nod32.exe) in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled...7.2 High
- jelsoft vbug trackerCross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and...2.6 Low
- cisco transport controller, ons 15310-cl series, ons 15454 mspp +2 more +4 moreThe installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS)...7.5 High
- cisco ons 15310-cl series, ons 15454 mspp, ons 15600 +2 more +4 moreControl cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow...5.0 Medium
- cisco ons 15310-cl series, ons 15454 mspp, ons 15454 mstp +2 more +4 moreControl cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow...7.8 High
- phpheaven phpmychatSQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier...6.4 Medium
- crafty syntax image gallery syntax image gallerynewimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery)...9.0 High
- crafty syntax image gallery syntax image gallerySQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka...7.5 High
- arab portal portalSQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to...7.5 High
- arab portal portalMultiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote...2.6 Low
- xine xine-libBuffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine...7.5 High
- limbo cms cmsThe frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute...7.5 High
- sk soft skforumMultiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote...6.8 Medium
- softbizscripts image gallery scriptCross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote...6.8 Medium
- softbizscripts image gallery scriptMultiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute...6.4 Medium
- chucky a. ivey n.t.Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows...7.5 High
- chucky a. ivey n.t.Cross-site scripting (XSS) vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote...4.3 Medium
- tony cook imagerImager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service ...2.6 Low
- openvpn, openvpn access server +1 moreOpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client...9.0 High
- vserver util-vservervserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is...7.2 High
- mpg123Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation...6.5 Medium
- hp color laserjet, color laserjet 2500, color laserjet 2500 toolbox +6 more +8 moreDirectory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600...5.0 Medium
- angelinecmsPHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote...7.5 High
- ultravnc tabbed viewer, vnc viewer +1 moreMultiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer...9.0 High
- microsoft isa server** DISPUTED ** Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering...7.5 High
- mozilla firefoxFirefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing...5.0 Medium
- eset software nod32 antivirusThe "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26...7.2 High
- smart technologies synchroneyesSMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote...5.0 Medium
- smart technologies synchroneyesAn unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and...7.8 High
- internet key exchange key exchangeThe Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane...5.0 Medium
- reloadcmsCross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5...6.8 Medium
- interactlogin.php in Interact 2.1.1 generates different responses depending on whether or not a username...5.0 Medium
- interactSQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute...7.5 High
- interactCross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject...2.6 Low
- czaries network czarnewsMultiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute...5.1 Medium
- Show moreLoading…