Skip to content
OpenAdvisories

Archive

22 February 2006

Vulnerabilities first published on this day (UTC), newest first.

← January 2006 2006 / February /22 March 2006 →
  1. 160
  2. 228
  3. 3 
  4. 424
  5. 5 
  6. 68
  7. 710
  8. 827
  9. 919
  10. 1020
  11. 112
  12. 12 
  13. 1338
  14. 1417
  15. 1553
  16. 1617
  17. 174
  18. 1824
  19. 1928
  20. 204
  21. 2121
  22. 2217
  23. 2326
  24. 2421
  25. 2514
  26. 26 
  27. 277
  28. 2835
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2006-0848 Public exploit EPSS 58%

    The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to e…

  • Unscored —
    CVE-2006-0841 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2006-0834

    Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, whic…

  • Unscored —
    CVE-2006-0844

    Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which …

  • Unscored —
    CVE-2006-0838

    IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (…

  • Unscored —
    CVE-2006-0839

    The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP option…

  • Unscored —
    CVE-2006-0836 Public exploit

    Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user i…

  • Unscored —
    CVE-2006-0842

    Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2006-0840

    manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) cha…

  • Unscored —
    CVE-2006-0846

    Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-0835 Public exploit

    SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL…

  • Unscored —
    CVE-2006-0837

    IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/Neu…

  • Unscored —
    CVE-2006-0843

    Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access contro…

  • High 7.5
    CVE-2006-0847

    CherryPy Directory traversal vulnerability

    Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.

    cherrypy PyPI
  • Unscored —
    CVE-2006-0845

    Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary program…

  • Unscored —
    CVE-2006-0832 Public exploit

    Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-0833

    Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitra…