cve.nowby Sazabi

CVEs published January 21, 2006

26 CVEs were published on January 21, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 26
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 26
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 26

CVE-2006-0345Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter…UnratedJan 21, 2006
CVE-2006-0346Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website…UnratedJan 21, 2006
CVE-2006-0347Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via…UnratedJan 21, 2006
CVE-2006-0348Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service…UnratedJan 21, 2006
CVE-2006-0349SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php.UnratedJan 21, 2006
CVE-2006-0350Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message…UnratedJan 21, 2006
CVE-2006-0351Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.UnratedJan 21, 2006
CVE-2006-0352The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control…UnratedJan 21, 2006
CVE-2006-0327TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3)…UnratedJan 21, 2006
CVE-2006-0328Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a…UnratedJan 21, 2006
CVE-2006-0329SQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows remote attackers to execute arbitrary SQL…UnratedJan 21, 2006
CVE-2006-0330Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via…UnratedJan 21, 2006
CVE-2006-0331Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line…UnratedJan 21, 2006
CVE-2006-0332Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote…UnratedJan 21, 2006
CVE-2006-0333Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month…UnratedJan 21, 2006
CVE-2006-0334Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web…UnratedJan 21, 2006
CVE-2006-0335Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a denial of service…UnratedJan 21, 2006
CVE-2006-0336Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors…UnratedJan 21, 2006
CVE-2006-0337Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52…UnratedJan 21, 2006
CVE-2006-0338Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier…UnratedJan 21, 2006
CVE-2006-0339Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via…UnratedJan 21, 2006
CVE-2006-0340Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products…UnratedJan 21, 2006
CVE-2006-0341Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to…UnratedJan 21, 2006
CVE-2006-0342RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CPU consumption and…UnratedJan 21, 2006
CVE-2006-0343Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows attackers to stop the…UnratedJan 21, 2006
CVE-2006-0344Directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote attackers to read and write arbitrary files via a…UnratedJan 21, 2006