Skip to content
OpenAdvisories

Archive

24 February 2006

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —
    CVE-2006-0884 Public exploit

    The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacke…

  • Unscored —

    The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to ca…

  • Unscored —
    CVE-2006-0879 Public exploit

    SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary S…

  • Unscored —

    Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-0875 Public exploit

    Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-0877 Public exploit

    Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via…

  • Unscored —

    Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header b…

  • Unscored —
    CVE-2006-0881 Public exploit

    Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals…

  • Unscored —
    CVE-2006-0882 Public exploit

    Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary…

  • Unscored —

    Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote …

  • Unscored —
    CVE-2006-0871 Public exploit

    Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions al…

  • Unscored —

    Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact,…

  • Unscored —

    Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, a…

  • Unscored —
    CVE-2006-0880 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to in…

  • Unscored —

    POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors …

  • Unscored —
    CVE-2005-2934 Public exploit

    Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecifi…

  • Unscored —

    Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application cr…

  • Unscored —

    webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame v…

  • Unscored —

    CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands v…

  • Unscored —

    Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross…

  • Unscored —

    Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from ad…