cve.nowby Sazabi

CVEs published May 19, 2006

36 CVEs were published on May 19, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 36
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 36
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 36

CVE-2006-1856Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks…UnratedMay 19, 2006
CVE-2006-2483PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary…UnratedMay 19, 2006
CVE-2006-2484Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary…UnratedMay 19, 2006
CVE-2006-2485PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 allows remote…UnratedMay 19, 2006
CVE-2006-2486SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the…UnratedMay 19, 2006
CVE-2006-2487Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via…UnratedMay 19, 2006
CVE-2006-2488Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or…UnratedMay 19, 2006
CVE-2006-2489Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service…UnratedMay 19, 2006
CVE-2006-2490Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before…UnratedMay 19, 2006
CVE-2006-2491Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote…UnratedMay 19, 2006
CVE-2005-3782Mac OS X 10.4.3 up to 10.4.6, when loginwindow uses the "Name and password" setting, and the "Show the Restart, Sleep, and Shut Down…UnratedMay 19, 2006
CVE-2006-0039Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to…UnratedMay 19, 2006
CVE-2006-2312Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows remote authorized…UnratedMay 19, 2006
CVE-2006-2480Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary…UnratedMay 19, 2006
CVE-2006-0059Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server before 5.00.035 allows…UnratedMay 19, 2006
CVE-2006-2473Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the…UnratedMay 19, 2006
CVE-2006-2474SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via…UnratedMay 19, 2006
CVE-2006-2475Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote…UnratedMay 19, 2006
CVE-2006-2476Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers…UnratedMay 19, 2006
CVE-2006-2477Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject…UnratedMay 19, 2006
CVE-2006-2478Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request.UnratedMay 19, 2006
CVE-2006-2479The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote…UnratedMay 19, 2006
CVE-2006-2459SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL…UnratedMay 19, 2006
CVE-2006-2460Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as…UnratedMay 19, 2006
CVE-2006-2461BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some…UnratedMay 19, 2006

Show all 36 entriesShow fewer entries