Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —CVE-2006-0933 Public exploit
Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML v…
-
Unscored —CVE-2006-0922 Public exploit
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.…
-
Unscored —
Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overw…
-
Unscored —
The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the _DUMP c…
-
Unscored —
Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login for…
-
Unscored —CVE-2006-0927 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burni…
-
Unscored —CVE-2006-0936 Public exploit
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and exe…
-
Unscored —
Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated us…
-
Unscored —
U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with meth…
-
Unscored —CVE-2006-0920 Public exploit
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, w…
-
Unscored —CVE-2006-0925 Public exploit
Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers t…
-
Unscored —
Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request…
-
Unscored —
Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold pa…
-
Unscored —
Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffI…
-
Unscored —
Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field.
-
Unscored —
Oreka before 0.5 allows remote attackers to cause a denial of service (application crash) via a "certain RTP sequence."
-
Unscored —
Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive info…
-
Unscored —
SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated user…
-
Unscored —
Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize paramete…
-
Unscored —
Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to…
-
Unscored —
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumpti…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script…
-
Unscored —
SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remo…
-
Unscored —
Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, …
-
Unscored —
Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read …
-
Critical 9.1
PEAR::Archive_Tar Directory Traversal vulnerability
Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive.
-
Unscored —
Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as dem…
-
Unscored —CVE-2006-0923 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to injec…
-
Unscored —CVE-2006-0906 Public exploit
SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid par…
-
Unscored —
PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a (/*) sequences …
-
Unscored —
SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create te…
-
Unscored —
Unspecified vulnerability in xscreensaver 4.12, and possibly other versions, allows attackers to cause xscreensaver to …
-
Unscored —
Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-ge…
-
Unscored —CVE-2006-0903 Public exploit
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL characte…
-
Unscored —
PHP treats unknown methods such as "PoSt" as a GET request, which could allow attackers to intended access restrictions…
-
Unscored —
Various routines for the ppc64 architecture on Linux kernel 2.6 prior to 2.6.2 and 2.4 prior to 2.4.24 do not use the c…
-
Unscored —
Stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Ente…
-
Unscored —
nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as dem…