Archive
25 January 2006
Vulnerabilities first published on this day (UTC), newest first.
37 results · Feed
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change …
-
Unscored —
Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and …
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use…
-
Unscored —
BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via u…
-
Unscored —
BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedd…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Admi…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or …
-
Unscored —
BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the confi…
-
Unscored —
Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when conn…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authentica…
-
Unscored —
BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been …
-
Unscored —
Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), a…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain t…
-
Unscored —
By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic …
-
Unscored —
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fra…
-
Unscored —
A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which cau…
-
Unscored —
FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which…
-
Unscored —CVE-2005-4667 Public exploit
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename …
-
Unscored —CVE-2006-0417 Public exploit
SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remo…
-
Unscored —
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or …
-
Unscored —CVE-2006-0418 Public exploit
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a craf…
-
Unscored —CVE-2006-0413 Public exploit
Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands…
-
Unscored —
Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a larg…
-
Unscored —CVE-2006-0415 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject…
-
Unscored —
SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parame…
-
Unscored —
SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentic…
-
Unscored —
claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows …
-
Unscored —
The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service …
-
Unscored —
SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-0407 Public exploit
Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attac…
-
Unscored —
Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other so…
-
Unscored —
Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands.
-
Unscored —
Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows …
-
Unscored —
rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code vi…
-
Unscored —CVE-2006-0409 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject ar…
-
Unscored —
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reve…