Skip to content
OpenAdvisories

Archive

19 February 2006

Vulnerabilities first published on this day (UTC), newest first.

28 results · Feed

  • Unscored —
    CVE-2006-0791 Public exploit

    PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrar…

  • Unscored —

    Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitr…

  • Unscored —

    frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites i…

  • Unscored —

    Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing …

  • Unscored —

    Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-0797 Public exploit

    Nokia N70 cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluet…

  • Unscored —

    help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters.…

  • Unscored —

    Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets…

  • Unscored —
    CVE-2006-0792 Public exploit

    Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inje…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier allow remote attackers t…

  • Unscored —

    Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to i…

  • Unscored —
    CVE-2006-0783 Public exploit

    Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote …

  • Unscored —
    CVE-2006-0787 Public exploit

    wimpy_trackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary …

  • Unscored —

    Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration sett…

  • Unscored —

    Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attacker…

  • Unscored —

    Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files …

  • Unscored —

    Directory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to read certain fi…

  • Unscored —
    CVE-2006-0786 Public exploit

    Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, …

  • Unscored —
    CVE-2006-0784 Public exploit

    D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 0…

  • Unscored —

    Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject a…

  • Unscored —
    CVE-2006-0775 Public exploit

    Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL comm…

  • Unscored —

    Unspecified vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to execute arbitrary shell …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-0774 Public exploit

    SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, …

  • Unscored —

    SQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through …