Archive
15 February 2006
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —CVE-2006-0455 Public exploit
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even…
-
Unscored —CVE-2006-0719 Public exploit
SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute…
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when runn…
-
Unscored —CVE-2006-0706 Public exploit
Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inje…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attac…
-
Unscored —
Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary…
-
Unscored —
Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allo…
-
Unscored —CVE-2006-0715 Public exploit
Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —CVE-2006-0710 Public exploit
Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2006-0717 Public exploit
IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request…
-
Unscored —CVE-2006-0705 EPSS 10%
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflecti…
-
Unscored —
iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain …
-
Unscored —
Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-0714 Public exploit
Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote atta…
-
Unscored —CVE-2006-0702 Public exploit
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (…
-
Unscored —
SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-0701 Public exploit
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
-
Unscored —
PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP…
-
Unscored —CVE-2006-0688 Public exploit
PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attacker…
-
Unscored —
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) …
-
Unscored —
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute ar…
-
Unscored —
Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code …
-
Unscored —
Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown imp…
-
Unscored —
mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, whi…
-
Unscored —
SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unsp…
-
Unscored —CVE-2006-0691 Public exploit
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows rem…
-
Unscored —CVE-2006-0713 Public exploit
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) seq…
-
Unscored —
The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, wh…
-
Unscored —CVE-2006-0699 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows …
-
Unscored —
Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote att…
-
Unscored —CVE-2006-0700 Public exploit
imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which retur…
-
Unscored —
Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vec…
-
Unscored —CVE-2006-0703 Public exploit
Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulne…
-
Unscored —
Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly…
-
Unscored —
Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenT…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.cfm in tmsPUBLISHER 3.3 allows remote attackers to inject arbitrary …
-
Unscored —
Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arb…
-
Unscored —
Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file …
-
Unscored —CVE-2005-4720 Public exploit
Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an I…
-
Unscored —
_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argu…