Skip to content
OpenAdvisories

Archive

2 February 2006

Vulnerabilities first published on this day (UTC), newest first.

28 results · Feed

  • Unscored —

    The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey …

  • Unscored —

    Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey befo…

  • Unscored —

    The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of …

  • Unscored —

    Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multipl…

  • Unscored —

    Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multipl…

  • Unscored —

    The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (…

  • Unscored —
    CVE-2006-0295 Public exploit EPSS 71%

    Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote atta…

  • Unscored —

    The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the att…

  • Unscored —

    Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote at…

  • Unscored —

    The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, whic…

  • Unscored —

    Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alp…

  • Unscored —

    The default configuration of the America Online (AOL) client software allows all users to modify a certain registry val…

  • Unscored —

    SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via…

  • Unscored —
    CVE-2006-0522 Public exploit

    SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build …

  • Unscored —

    BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via…

  • Unscored —
    CVE-2006-0528 Public exploit EPSS 11%

    The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause …

  • Unscored —
    CVE-2006-0518 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier a…

  • Unscored —

    PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a …

  • Unscored —
    CVE-2006-0520 Public exploit

    SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attack…

  • Unscored —

    Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large n…

  • Unscored —

    Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows l…

  • Unscored —

    SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2006-0524 Public exploit

    Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web s…

  • Unscored —

    Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement …

  • Unscored —

    The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains th…

  • Unscored —

    Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia …

  • Unscored —
    CVE-2003-1292 Public exploit

    PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbi…