Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
148 results · Clear filters · Feed
-
Unscored —CVE-2006-0713 Public exploit
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) seq…
-
Unscored —CVE-2006-0699 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows …
-
Unscored —CVE-2006-0700 Public exploit
imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which retur…
-
Unscored —CVE-2006-0703 Public exploit
Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulne…
-
Unscored —
Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file …
-
Unscored —CVE-2005-4720 Public exploit
Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an I…
-
Unscored —CVE-2005-4723 Public exploit
D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (…
-
Unscored —
Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows S…
-
Unscored —CVE-2006-0681 Public exploit
Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2006-0687 Public exploit
process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows …
-
Unscored —CVE-2006-0684 Public exploit
change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when …
-
Unscored —CVE-2006-0685 Public exploit
The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when a…
-
Unscored —
Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, …
-
Unscored —
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang…
-
Unscored —
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Inte…
-
Unscored —CVE-2005-3058 Public exploit
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypas…
-
Unscored —CVE-2006-0669 Public exploit
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-0673 Public exploit
Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, al…
-
Unscored —CVE-2006-0675 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-0676 Public exploit
Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-0668 Public exploit
SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-0671 Public exploit
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of …
-
Unscored —CVE-2005-4714 Public exploit
Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote atta…
-
Unscored —CVE-2006-0651 Public exploit
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID…
-
Unscored —CVE-2006-0663 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers …
-
Unscored —CVE-2006-0650 Public exploit
Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scr…
-
Unscored —CVE-2006-0660 Public exploit
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary…
-
Unscored —CVE-2006-0647 Public exploit
LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote atta…
-
Unscored —CVE-2006-0659 Public exploit
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen e…
-
Unscored —CVE-2006-0658 Public exploit
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allow…
-
Unscored —CVE-2006-0644 Public exploit
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 a…
-
Unscored —CVE-2006-0637 Public exploit
Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an I…
-
Unscored —CVE-2006-0628 Public exploit
myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —CVE-2006-0626 Public exploit
SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-0625 Public exploit
Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include…
-
Unscored —CVE-2006-0620 Public exploit
Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipu…
-
Unscored —CVE-2006-0623 Public exploit
QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify th…
-
Unscored —CVE-2006-0624 Public exploit
SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-1528 Public exploit
Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitr…
-
Unscored —CVE-2006-0586 Public exploit
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute ar…