Archive
13 February 2006
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
Unspecified vulnerability in HP PSC 1210 All-in-One Drivers before 1.0.06 has unknown impact and attack vectors.
-
Unscored —
Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of…
-
Unscored —CVE-2006-0669 Public exploit
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-0673 Public exploit
Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, al…
-
Unscored —CVE-2006-0675 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary w…
-
Unscored —
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wirel…
-
Unscored —CVE-2006-0676 Public exploit
Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-0668 Public exploit
SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-0671 Public exploit
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of …
-
Unscored —CVE-2005-4714 Public exploit
Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote atta…
-
Unscored —
Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote …
-
Unscored —
The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whethe…
-
Unscored —
Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of serv…
-
Unscored —
elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite redirection) via a request wit…
-
Unscored —
Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers…
-
Unscored —
Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arb…
-
Unscored —
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumpti…
-
Unscored —CVE-2006-0651 Public exploit
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID…
-
Unscored —CVE-2006-0663 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers …
-
Unscored —CVE-2006-0650 Public exploit
Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DataparkSearch before 4.37 allows remote attackers to inject arbitrary web …
-
Unscored —
Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows remote attackers to inj…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inj…
-
Unscored —
Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impa…
-
Unscored —CVE-2006-0660 Public exploit
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary…
-
Unscored —
check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attac…
-
Unscored —CVE-2006-0647 Public exploit
LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote atta…
-
Unscored —
Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inje…
-
Unscored —
Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, whe…
-
Unscored —CVE-2006-0659 Public exploit
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen e…
-
Unscored —CVE-2006-0658 Public exploit
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allow…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phph…
-
Unscored —
WHMCompleteSolution (WHMCS) before 2.3 assigns incorrect permissions to "resellers", which allows remote authenticated …
-
Unscored —
Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrar…
-
Unscored —
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows r…
-
Unscored —
nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on f…