CVEs published in April 2006
576 vulnerabilities, 42 critical, 0 exploited.
- avantbrowser avant browserArgument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote...5.0 Medium
- mozilla firefoxArgument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers...5.0 Medium
- microsoft internet explorerArgument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted...5.0 Medium
- microsoft outlookArgument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote...5.0 Medium
- 3com 3c164863Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 allows remote...5.0 Medium
- quickestoreMultiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to...6.4 Medium
- verosky media instant photo galleryCross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote...5.8 Medium
- nextage shopping cartMultiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart...5.8 Medium
- dcscripts dcforumliteSQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers...5.0 Medium
- dcscripts dcforumliteCross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows...4.3 Medium
- phpwebftpMultiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3...4.3 Medium
- application dynamics cartweaver coldfusionApplication Dynamics Cartweaver ColdFusion 2.16.11 and earlier allows remote attackers to obtain...5.0 Medium
- application dynamics cartweaver coldfusionMultiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and...6.4 Medium
- ip3 networks netaccess 75The (1) shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world...3.6 Low
- ip3 networks netaccess 75na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has a default username of admin and a...7.5 High
- ip3 networks netaccess 75na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell...4.6 Medium
- phpwebgalleryPhpWebGallery before 1.6.0RC1 allows remote attackers to obtain arbitrary pictures via a request...5.0 Medium
- photokornMultiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to...6.4 Medium
- ubertec help center liveMultiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0...7.5 High
- amplecom ampleshopMultiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to...7.5 High
- thwboardCross-site scripting (XSS) vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote...4.3 Medium
- linux kernelDirectory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to...4.6 Medium
- iopus secure email attachmentsiOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that...2.1 Low
- websenseWebsense, when configured to permit access to the dynamic content category, allows local users to...3.7 Low
- flexbbSQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers...7.5 High
- corenewsPHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote...6.4 Medium
- corenewsMultiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers...6.4 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev,...2.6 Low
- alliedtelesyn at-9724tsThe Allied Telesyn AT-9724TS switch allows remote attackers to cause a denial of service via a...5.0 Medium
- simplogMultiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote...6.4 Medium
- simplogCross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and...5.8 Medium
- pablo software solutions quick n easy ftp serverBuffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions...6.5 Medium
- abcmidiMultiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions,...7.5 High
- francesco stablum tcpickFrancesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation...5.0 Medium
- libtiffDouble free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent...6.5 Medium
- libtiffInteger overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows...6.5 Medium
- libtiffMultiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a...4.0 Medium
- linux kernelDirectory traversal vulnerability in CIFS in Linux 2.6.16 and earlier allows local users to...2.1 Low
- ls3 feniceInteger overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier...5.0 Medium
- ls3 feniceBuffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10...7.5 High
- asteriskathomeAbsolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording...5.0 Medium
- asteriskathomeAsterisk Recording Interface (ARI) in Asterisk@Home before 2.8 stores recordings/includes/main...7.8 High
- apple safariApple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause...5.0 Medium
- jelsoft vbulletinSQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute...7.5 High
- dnsmasqDnsmasq 2.29 allows remote attackers to cause a denial of service (application crash) via a DHCP...5.0 Medium
- phpldapadmin project phpldapadmin, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow...2.6 Low
- web-provence sl siteCross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject...2.6 Low
- web-provence sl siteDirectory traversal vulnerability in gallerie.php in SL_site 1.0 allows remote attackers to list...5.0 Medium
- web-provence sl siteSQL injection vulnerability in page.php in SL_site 1.0 allows remote attackers to execute...7.5 High
- skulltag team skulltagFormat string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a...5.0 Medium
- Show moreLoading…