cve.nowby Sazabi

CVEs published April 11, 2006

42 CVEs were published on April 11, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 42
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 42
Now in CISA KEV: 0
Fix available: 1

Most affected products

plone: 1

Medium, low and unrated 42

CVE-2006-0015Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint…UnratedApr 11, 2006
CVE-2006-1185Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain…UnratedApr 11, 2006
CVE-2006-1186Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll…UnratedApr 11, 2006
CVE-2006-1188Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag…UnratedApr 11, 2006
CVE-2006-1189Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a…UnratedApr 11, 2006
CVE-2006-1190Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an…UnratedApr 11, 2006
CVE-2006-1191Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which…UnratedApr 11, 2006
CVE-2006-1192Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts…UnratedApr 11, 2006
CVE-2006-1713Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web…UnratedApr 11, 2006
CVE-2006-1714CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via…UnratedApr 11, 2006
CVE-2006-1715Multiple directory traversal vulnerabilities in Christian Kindahl TUGZip 3.4.0.0, 3.3.0.0, and 3.1.0.2 allow user-assisted attackers to…UnratedApr 11, 2006
CVE-2006-1716Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject…UnratedApr 11, 2006
CVE-2006-1717Cross-site scripting (XSS) vulnerability in newthread.php in MyBB (aka MyBulletinBoard) 1.10, when configured to permit new threads by…UnratedApr 11, 2006
CVE-2006-1718Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows…UnratedApr 11, 2006
CVE-2006-1719Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets…UnratedApr 11, 2006
CVE-2006-1720Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML…UnratedApr 11, 2006
CVE-2006-1721digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21…UnratedApr 11, 2006
CVE-2006-1722Cross-site scripting (XSS) vulnerability in suche.htm in ShopXS 4.0 allows remote attackers to inject arbitrary web script or HTML via the…UnratedApr 11, 2006
CVE-2006-1712Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject…UnratedApr 11, 2006
CVE-2006-1710SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via…UnratedApr 11, 2006
CVE-2006-1711Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3)…ploneUnratedFix availableApr 11, 2006
CVE-2006-1060Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG…UnratedApr 11, 2006
CVE-2006-1690Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote attackers to inject arbitrary web script or…UnratedApr 11, 2006
CVE-2006-1691SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter…UnratedApr 11, 2006
CVE-2006-1692Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1)…UnratedApr 11, 2006

Show all 42 entriesShow fewer entries