cve.nowby Sazabi

CVEs published January 9, 2006

52 CVEs were published on January 9, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 52
Critical: 0
High: 0
Medium: 1
Low: 0
Unrated: 51
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 52

CVE-2005-2344The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows…UnratedJan 9, 2006
CVE-2005-4636OpenOffice.org 2.0 and earlier, when hyperlinks has been disabled, does not prevent the user from clicking the WWW-browser button in the…UnratedJan 9, 2006
CVE-2005-4637Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to…UnratedJan 9, 2006
CVE-2005-4638index.php in Kayako SupportSuite 3.00.26 and earlier allow remote attackers to obtain the full path via (1) _a and (2) newsid parameters…UnratedJan 9, 2006
CVE-2006-0144The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code…UnratedJan 9, 2006
CVE-2006-0145The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative…UnratedJan 9, 2006
CVE-2006-0146The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4)…UnratedJan 9, 2006
CVE-2006-0147Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including…UnratedJan 9, 2006
CVE-2006-0148NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address.UnratedJan 9, 2006
CVE-2006-0149Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary…Medium · 6.1Jan 9, 2006
CVE-2006-0150Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers…UnratedJan 9, 2006
CVE-2006-0151sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges…UnratedJan 9, 2006
CVE-2005-4351The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root…UnratedJan 9, 2006
CVE-2005-4352The securelevels implementation in NetBSD 2.1 and earlier, and Linux 2.6.15 and earlier, allows local users to bypass time setting…UnratedJan 9, 2006
CVE-2006-0083Format string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier allows local users to execute arbitrary…UnratedJan 9, 2006
CVE-2006-0143Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a…UnratedJan 9, 2006
CVE-2005-4591Heap-based buffer overflow in bogofilter 0.96.2, 0.95.2, 0.94.14, 0.94.12, and other versions from 0.93.5 to 0.96.2, when using Unicode…UnratedJan 9, 2006
CVE-2005-4592Heap-based buffer overflow in bogofilter and bogolexer 0.96.2 allows remote attackers to cause a denial of service (crash) and possibly…UnratedJan 9, 2006
CVE-2006-0140Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject…UnratedJan 9, 2006
CVE-2006-0141Qualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a denial of service (crash) via (1) malformed…UnratedJan 9, 2006
CVE-2006-0142Cross-site scripting (XSS) vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web…UnratedJan 9, 2006
CVE-2004-2653Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1)…UnratedJan 9, 2006
CVE-2005-2762Avaya VPNRemote before 4.2.33 stores credentials in cleartext in process memory, which allows attackers to obtain the VPN user's…UnratedJan 9, 2006
CVE-2005-3540Buffer overflow in petris before 1.0.1 allows remote attackers to execute arbitrary code via unspecified attack vectors.UnratedJan 9, 2006
CVE-2006-0139The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private…UnratedJan 9, 2006

Show all 52 entriesShow fewer entries