cve.nowby Sazabi

CVEs published January 11, 2006

30 CVEs were published on January 11, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 30
Critical: 0
High: 0
Medium: 1
Low: 0
Unrated: 29
Now in CISA KEV: 0
Fix available: 1

Most affected products

trac: 1

Medium, low and unrated 30

CVE-2005-4644Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web…tracUnratedFix availableJan 11, 2006
CVE-2005-4645SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter.UnratedJan 11, 2006
CVE-2005-4646Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files via the mode…UnratedJan 11, 2006
CVE-2005-4647Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL commands via the (1)…UnratedJan 11, 2006
CVE-2006-0035The netlink_rcv_skb function in af_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service (infinite…UnratedJan 11, 2006
CVE-2006-0054The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that…Medium · 5.3Jan 11, 2006
CVE-2006-0055The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which…UnratedJan 11, 2006
CVE-2006-0163SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute…UnratedJan 11, 2006
CVE-2006-0164phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute…UnratedJan 11, 2006
CVE-2006-0165Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote…UnratedJan 11, 2006
CVE-2006-0166Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin…UnratedJan 11, 2006
CVE-2006-0167SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in…UnratedJan 11, 2006
CVE-2006-0168Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the…UnratedJan 11, 2006
CVE-2006-0169addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the…UnratedJan 11, 2006
CVE-2006-0171PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in…UnratedJan 11, 2006
CVE-2006-0172Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise…UnratedJan 11, 2006
CVE-2006-0173Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and…UnratedJan 11, 2006
CVE-2006-0174Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive…UnratedJan 11, 2006
CVE-2006-0175Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script…UnratedJan 11, 2006
CVE-2006-0176Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain…UnratedJan 11, 2006
CVE-2006-0177Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long…UnratedJan 11, 2006
CVE-2006-0178Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the…UnratedJan 11, 2006
CVE-2006-0179The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to…UnratedJan 11, 2006
CVE-2005-2340Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime…UnratedJan 11, 2006
CVE-2005-3707Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.UnratedJan 11, 2006

Show all 30 entriesShow fewer entries