Skip to content
OpenAdvisories

Archive

10 February 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —

    Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) …

  • Unscored —
    CVE-2006-0644 Public exploit

    Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 a…

  • Unscored —

    Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing t…

  • Unscored —

    SQL injection vulnerability in moderation.php in MyBB (aka MyBulletinBoard) 1.0.3 allows remote authenticated users, wi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in WiredRed e/pop Web Conferencing 4.1.0.755 allows remote authenticated users…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in MyBB (aka MyBulletinBoard) 1.0.2 allows remote attackers with…

  • Unscored —

    Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression t…

  • Unscored —

    Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command …

  • Unscored —

    The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partiall…

  • Unscored —

    desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_star…

  • Unscored —
    CVE-2006-0637 Public exploit

    Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an I…

  • Unscored —

    The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activati…

  • Unscored —

    Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have …

  • Unscored —

    Tiny C Compiler (TCC) 0.9.23 (aka TinyCC) evaluates the "i>sizeof(int)" expression to false when i equals -1, which mig…

  • Unscored —

    RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME mess…

  • Unscored —
    CVE-2006-0628 Public exploit

    myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the…

  • Unscored —

    CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "s…

  • Unscored —

    Unspecified vulnerability in AOL Instant Messenger (AIM) 5.9.3861 allows user-assisted remote attackers to cause a deni…

  • Unscored —

    SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows r…