Archive
8 February 2006
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inj…
-
Unscored —
SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote at…
-
Unscored —
Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary…
-
Unscored —
Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —
Cross-site scripting (XSS) vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitr…
-
Unscored —
Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers…
-
Unscored —
check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which …
-
Unscored —
Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure d…
-
Unscored —
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which …
-
Unscored —CVE-2006-0585 EPSS 15%
jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (ap…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web …
-
Unscored —
Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet function…
-
Unscored —
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credenti…
-
Unscored —CVE-2006-0586 Public exploit
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute ar…
-
Unscored —
IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted pac…
-
Unscored —
SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leak…
-
Unscored —
Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows…
-
Unscored —
Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, w…
-
Unscored —CVE-2006-0583 Public exploit
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitr…
-
Unscored —
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blow…
-
Unscored —
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which l…
-
Unscored —
SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary…
-
Unscored —
Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner…
-
Unscored —
Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary …
-
Unscored —
Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecti…