CVEs published May 20, 2006
9 CVEs were published on May 20, 2006: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 9
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 8
- CVE-2006-2494Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map file.
- CVE-2006-2495Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unau
- CVE-2006-2496Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial of service (application crash) and possib
- CVE-2006-2497Multiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1)
- CVE-2006-2498Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_ic
- CVE-2006-2499SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via
- CVE-2006-2500Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web
- CVE-2006-2501Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Appl