2006

Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xer

Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCe

Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options

manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) char

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read

The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestb

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote

InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a

PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, whic

Buffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08 build 1131 and version 8, a

CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands vi

Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers

Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote a

Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scrip

POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors i

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via

Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary

Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2) SpeedCommander 11.01.44

Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via .

NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles direct

NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.

Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request

Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to

NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumptio

Oreka before 0.5 allows remote attackers to cause a denial of service (application crash) via a "certain RTP sequence."

CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.i

Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to

The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the _DUMP co

Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to

Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwr

U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with metho

IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service (

uConfig agent in Compex NetPassage WPE54G router allows remote attackers to cause a denial of service (unresposiveness)

Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files vi

SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary

Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to

Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail

The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious conte

WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-

The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive querie

EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote at

SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote

The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, wh

response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbit