Skip to content
OpenAdvisories

Archive

15 February 2006

Vulnerabilities first published on this day (UTC), newest first.

23 results · Clear filters · Feed

  • Unscored —
    CVE-2006-0455 Public exploit

    gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even…

  • Unscored —
    CVE-2006-0719 Public exploit

    SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute…

  • Unscored —
    CVE-2006-0706 Public exploit

    Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inje…

  • Unscored —
    CVE-2006-0715 Public exploit

    Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML vi…

  • Unscored —
    CVE-2006-0710 Public exploit

    Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code …

  • Unscored —
    CVE-2006-0717 Public exploit

    IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request…

  • Unscored —
    CVE-2006-0714 Public exploit

    Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote atta…

  • Unscored —
    CVE-2006-0702 Public exploit

    admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (…

  • Unscored —
    CVE-2006-0701 Public exploit

    readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.

  • Unscored —
    CVE-2006-0688 Public exploit

    PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attacker…

  • Unscored —
    CVE-2006-0691 Public exploit

    edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows rem…

  • Unscored —
    CVE-2006-0713 Public exploit

    Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) seq…

  • Unscored —
    CVE-2006-0699 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows …

  • Unscored —
    CVE-2006-0700 Public exploit

    imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which retur…

  • Unscored —
    CVE-2006-0703 Public exploit

    Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulne…

  • Unscored —
    CVE-2005-4718 Public exploit EPSS 10%

    Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file …

  • Unscored —
    CVE-2005-4720 Public exploit

    Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an I…

  • Unscored —
    CVE-2005-4723 Public exploit

    D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2005-4717 Public exploit EPSS 16%

    Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows S…

  • Unscored —
    CVE-2006-0681 Public exploit

    Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-0687 Public exploit

    process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows …

  • Unscored —
    CVE-2006-0684 Public exploit

    change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when …

  • Unscored —
    CVE-2006-0685 Public exploit

    The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when a…