Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
509 results · Feed
-
Unscored —
Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute a…
-
Unscored —
Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaini…
-
Unscored —CVE-2006-0443 Public exploit
Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-0444 Public exploit
SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrar…
-
Unscored —
Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control…
-
Unscored —CVE-2006-0442 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers…
-
Unscored —
Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER …
-
Unscored —
index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an i…
-
Unscored —
The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to exec…
-
Unscored —
SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL c…
-
Unscored —
Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown a…
-
Unscored —
Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." …
-
Unscored —
Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Ser…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change …
-
Unscored —
Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and …
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use…
-
Unscored —
BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via u…
-
Unscored —
BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedd…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Admi…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or …
-
Unscored —
BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the confi…
-
Unscored —
Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when conn…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authentica…
-
Unscored —
BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been …
-
Unscored —
Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), a…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain t…
-
Unscored —
By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic …
-
Unscored —
A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fra…
-
Unscored —
A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which cau…
-
Unscored —
FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which…
-
Unscored —CVE-2005-4667 Public exploit
Buffer overflow in UnZip 5.50 and earlier allows user-assisted attackers to execute arbitrary code via a long filename …
-
Unscored —CVE-2006-0417 Public exploit
SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remo…
-
Unscored —
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or …
-
Unscored —CVE-2006-0418 Public exploit
Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a craf…
-
Unscored —CVE-2006-0413 Public exploit
Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands…
-
Unscored —
Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a larg…
-
Unscored —CVE-2006-0415 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject…
-
Unscored —
SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parame…
-
Unscored —
SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentic…
-
Unscored —
claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows …