Skip to content
OpenAdvisories

Archive

23 February 2006

Vulnerabilities first published on this day (UTC), newest first.

26 results · Feed

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allo…

  • Unscored —

    PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, whi…

  • Unscored —

    Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guest…

  • Unscored —
    CVE-2006-0857 Public exploit

    Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrar…

  • Unscored —

    SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-0865 Public exploit

    PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering man…

  • Unscored —

    Buffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08 build 1131 and version 8, …

  • Unscored —
    CVE-2006-0869 Public exploit

    Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Reposit…

  • Unscored —

    filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to …

  • Unscored —

    Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses o…

  • Unscored —
    CVE-2006-0870 Public exploit

    SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute a…

  • Unscored —

    Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified in…

  • Unscored —

    Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remot…

  • Unscored —

    InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a…

  • High —

    PEAR::Auth potential authentication bypass vulnerability

    Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

  • Unscored —
    CVE-2006-0720 Public exploit EPSS 11%

    Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of servic…

  • Unscored —

    Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Ba…

  • Unscored —

    The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that i…

  • Unscored —

    The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6…

  • Unscored —
    CVE-2005-3525 EPSS 20%

    Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and…

  • Unscored —
    CVE-2006-0851 Public exploit

    SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-0852 Public exploit

    Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute…

  • Unscored —

    PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to inc…

  • Unscored —

    Buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows remote authenticated u…

  • Unscored —

    SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to exec…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary…