Skip to content
OpenAdvisories

Archive

4 February 2006

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9…

  • Unscored —

    Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to exe…

  • Unscored —
    CVE-2006-0544 Public exploit EPSS 22%

    urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2006-0545 Public exploit

    SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows r…

  • Unscored —

    SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might a…

  • Unscored —
    CVE-2006-0549 Public exploit

    SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inj…

  • Unscored —

    Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of …

  • Unscored —

    SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remot…

  • Unscored —

    Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.co…

  • Unscored —

    Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause…

  • Unscored —
    CVE-2006-0539 Public exploit

    The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument…

  • Unscored —

    Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message cont…

  • Unscored —

    Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrar…

  • Unscored —

    Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containi…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrar…

  • Unscored —

    Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authen…

  • Unscored —
    CVE-2006-0534 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attack…

  • Unscored —
    CVE-2006-0537 Public exploit EPSS 42%

    Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to exec…

  • Unscored —
    CVE-2006-0532 Public exploit

    Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web …

  • Unscored —

    CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial o…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web …