2006

Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52

Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows attac

Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the

Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denial

Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.

The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient ac

Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a lo

Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER co

Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified d

TippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote atta

Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, whi

Directory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote attackers to read arbitrary .tx

Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on VxWorks uses a hardcoded Net

fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted

Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows r

The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (

search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that revea

SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQ

Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large

SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt paramet

A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub frag

BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use

BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via un

Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when conne

Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (

Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control,

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtainin

Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to

phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering man

Unspecified vulnerability in Pioneers (formerly gnocatan) before 0.9.49 allows remote attackers to cause a denial of ser

PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service (ping fl

Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a d

Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbitr

Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trigg

IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (servic

Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of servi

zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly c

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled,

Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement w

SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via

The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a

The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attr

Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple

Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple

Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message conta

Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enable

Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1

The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (applicatio

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle

Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Co