Skip to content
OpenAdvisories

Archive

18 February 2006

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • Unscored —

    CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause error…

  • Unscored —

    Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send re…

  • Unscored —

    Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games,…

  • Unscored —

    Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unkn…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inj…

  • Unscored —

    Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Liba…

  • Unscored —
    CVE-2005-4724 Public exploit

    SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —

    GUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibl…

  • Unscored —
    CVE-2006-0757 Public exploit

    Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP cod…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote attackers to inject arbitrary …

  • Unscored —

    WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application …

  • Unscored —

    Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would…

  • Unscored —
    CVE-2006-0758 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitr…

  • Unscored —

    ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-ass…

  • Unscored —
    CVE-2006-0759 Public exploit

    Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Multiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2) NOOFS daemon in in Networ…

  • Unscored —
    CVE-2006-0753 EPSS 12%

    Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of…

  • Unscored —

    Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 b…

  • Unscored —

    LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass UR…

  • Unscored —

    dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invali…

  • Unscored —
    CVE-2006-0750 Public exploit

    SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) al…

  • Unscored —

    dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after insta…

  • Unscored —

    The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used b…

  • Medium 5.6
    CVE-2006-0755 Public exploit

    Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, all…