Archive
24 February 2006
Vulnerabilities first published on this day (UTC), newest first.
21 results · Feed
-
Unscored —CVE-2006-0884 Public exploit
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacke…
-
Unscored —
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to ca…
-
Unscored —CVE-2006-0879 Public exploit
SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary S…
-
Unscored —
Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers…
-
Unscored —CVE-2006-0875 Public exploit
Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-0877 Public exploit
Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via…
-
Unscored —
Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header b…
-
Unscored —CVE-2006-0881 Public exploit
Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals…
-
Unscored —CVE-2006-0882 Public exploit
Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary…
-
Unscored —
Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote …
-
Unscored —CVE-2006-0871 Public exploit
Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions al…
-
Unscored —
Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact,…
-
Unscored —
Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, a…
-
Unscored —CVE-2006-0880 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to in…
-
Unscored —
POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors …
-
Unscored —CVE-2005-2934 Public exploit
Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecifi…
-
Unscored —
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application cr…
-
Unscored —
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame v…
-
Unscored —
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands v…
-
Unscored —
Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross…
-
Unscored —
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from ad…