cve.nowby Sazabi

CVEs published April 13, 2006

47 CVEs were published on April 13, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 47
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 47
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 47

CVE-2006-1551Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via…UnratedApr 13, 2006
CVE-2006-1784PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disabled, allows…UnratedApr 13, 2006
CVE-2006-1785Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a leading (1) ftp or…UnratedApr 13, 2006
CVE-2006-1786Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary…UnratedApr 13, 2006
CVE-2006-1787Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, which allows remote…UnratedApr 13, 2006
CVE-2006-1788Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is…UnratedApr 13, 2006
CVE-2006-1789Directory traversal vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to read arbitrary files…UnratedApr 13, 2006
CVE-2006-1627Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform…UnratedApr 13, 2006
CVE-2006-1628Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their…UnratedApr 13, 2006
CVE-2004-2656Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before…UnratedApr 13, 2006
CVE-2005-4773The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service (shutdown) via the (1)…UnratedApr 13, 2006
CVE-2005-4774Cross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/…UnratedApr 13, 2006
CVE-2005-4775Michael Scholz and Sebastian Stein Contineo 2.0, when the admin account lacks an e-mail address attribute, displays the password hash in a…UnratedApr 13, 2006
CVE-2005-4776Integer overflow in the FreeBSD compatibility code (freebsd_misc.c) in NetBSD-current, NetBSD-3, NetBSD-2.0, and NetBSD-2 before 20050913…UnratedApr 13, 2006
CVE-2005-4777Tashcom ASPEdit 2.9 stores the administration password (aka the FTP password) in cleartext in the registry, which might allow local users…UnratedApr 13, 2006
CVE-2005-4778The powersave daemon in SUSE Linux 10.0 before 20051007 has an unspecified "configuration problem," which allows local users to suspend…UnratedApr 13, 2006
CVE-2005-4779verifiedexecioctl in verified_exec.c in NetBSD 2.0.2 calls NDINIT with UIO_USERSPACE rather than UID_SYSSPACE, which removes the…UnratedApr 13, 2006
CVE-2006-1765Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the…UnratedApr 13, 2006
CVE-2006-1766Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands…UnratedApr 13, 2006
CVE-2006-1767Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP…UnratedApr 13, 2006
CVE-2006-1768Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to…UnratedApr 13, 2006
CVE-2006-1769Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web…UnratedApr 13, 2006
CVE-2006-1770Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote attackers to…UnratedApr 13, 2006
CVE-2006-1771Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote…UnratedApr 13, 2006
CVE-2006-1772debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat…UnratedApr 13, 2006

Show all 47 entriesShow fewer entries