CVEs published in May 2006
582 vulnerabilities, 14 critical, 1 exploited.
- invision power services community blogSQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1...6.4 Medium
- cutephp cutenewsCuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1...6.4 Medium
- cutephp cutenewsMultiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier,...4.3 Medium
- northern solutions xeneo web serverXeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via...5.0 Medium
- webcalendarWebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a...5.0 Medium
- uapplication ublogCross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to...5.8 Medium
- phpbb group phpbb-auctionPHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for...6.8 Medium
- web4future news portalMultiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to...6.4 Medium
- web4future news portalMultiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote...5.8 Medium
- acftpacFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long...5.0 Medium
- ftrainsoft fast clickPHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier...6.4 Medium
- fujitsu netshelter fw, netshelter fw-l, netshelter fw-m +1 more +3 moreUnspecified vulnerability in the (1) web cache or (2) web proxy in Fujitsu NetShelter/FW allows...5.0 Medium
- tuomas airaksinen newsadminSQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to...7.5 High
- cam development unzip, erik dienske abakt, roger aelbrecht tzipbuilder +2 moreBuffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0...5.1 Medium
- tdc cryptomathic cenroll activex controlStack-based buffer overflow in the createPKCS10 function in Cryptomathic Cenroll ActiveX Control...5.0 Medium
- cisco adaptive security appliance software, firewall services module, pix firewall +1 more +3 moreCisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM...7.5 High
- awstatsThe web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote...5.1 Medium
- id software quake 3 engine, return to castle wolfenstein, quake 3 arena +1 more +3 moreBuffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1...7.6 High
- codemunkyx simple pollCodeMunkyX (aka free-php.net) Simple Poll 1.0, when authentication is not required for the admin...7.6 High
- tyrocmsMultiple cross-site scripting (XSS) vulnerabilities in TyroCMS beta 1.0 allow remote attackers to...6.8 Medium
- banktown btcxctl20com activex controlBuffer overflow in BankTown Client Control (aka BtCxCtl20Com) 1.4.2.51817, and possibly 1.5.2...7.5 High
- scriptsez cute guestbookCross-site scripting (XSS) vulnerability in Scriptsez Cute Guestbook 20060211 allows remote...4.3 Medium
- big webmaster guestbook scriptMultiple cross-site scripting (XSS) vulnerabilities in addguest.cgi in Big Webmaster Guestbook...4.3 Medium
- xineMultiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.4 might allow attackers...5.0 Medium
- openvpn, openvpn access server +1 moreOpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not...4.0 Medium
- w-agoraCross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers...4.3 Medium
- punbbCross-site scripting (XSS) vulnerability in misc.php in PunBB 1.2.11 allows remote attackers to...4.3 Medium
- dxmsoft xm easy personal ftp serverBuffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to...5.0 Medium
- dxmsoft xm easy personal ftp serverBuffer overflow in XM Easy Personal FTP Server 4.3 and earlier allows remote attackers to execute...7.5 High
- quagga routing software suiteRIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication...5.0 Medium
- quaggaRIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that (1)...5.0 Medium
- norz zawhttpdBuffer overflow in zawhttpd 0.8.23, and possibly previous versions, allows remote attackers to...5.0 Medium
- process-one ejabberd, bitrock install builder +1 moreA third-party installer generation tool, possibly BitRock InstallBuilder, as used in products...2.1 Low
- microsoft internet explorerUnspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote...9.3 High
- invision power services power boardSQL injection vulnerability in index.php in Invision Power Board allows remote attackers to...7.5 High
- devsyn open bulletin boardOpen Bulletin Board (OpenBB) 1.0.8 allows remote attackers to obtain the full path of the web...5.0 Medium
- 4images image gallery management systemMultiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to...7.5 High
- hostapdHostapd 0.3.7-2 allows remote attackers to cause a denial of service (segmentation fault) via an...5.0 Medium
- karjasoft sami ftp serverBuffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute...6.4 Medium
- 321soft php-galleryAbsolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote...5.0 Medium
- 321soft php-galleryCross-site scripting (XSS) vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote...5.8 Medium
- php arena pacheckbookMultiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote...6.4 Medium
- planetluc mynewsMultiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow...4.3 Medium
- ultravncThe MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR)...10.0 High
- netbsdThe audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel...2.1 Low
- invision power services power boardSQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod...5.5 Medium
- kerio mailserverUnspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack...6.4 Medium
- mysqlBuffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow...6.5 Medium
- mysqlsql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows...5.0 Medium
- mysqlThe check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18,...5.0 Medium
- Show moreLoading…