February 2006

148 results · Clear filters · Feed

• Unscored —
  CVE-2006-0583 Public exploit

  SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitr…

  Feb 8, 2006
• Unscored —
  CVE-2006-0564 Public exploit EPSS 72%

  Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included…

  Feb 6, 2006
• Unscored —
  CVE-2006-0513 Public exploit

  Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.…

  Feb 6, 2006
• Unscored —
  CVE-2006-0565 Public exploit

  PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers t…

  Feb 6, 2006
• Unscored —
  CVE-2006-0544 Public exploit EPSS 22%

  urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of serv…

  Feb 4, 2006
• Unscored —
  CVE-2006-0545 Public exploit

  SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows r…

  Feb 4, 2006
• Unscored —
  CVE-2006-0549 Public exploit

  SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions…

  Feb 4, 2006
• Unscored —
  CVE-2006-0539 Public exploit

  The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument…

  Feb 4, 2006
• Unscored —
  CVE-2006-0534 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attack…

  Feb 4, 2006
• Unscored —
  CVE-2006-0537 Public exploit EPSS 42%

  Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to exec…

  Feb 4, 2006
• Unscored —
  CVE-2006-0532 Public exploit

  Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary …

  Feb 4, 2006
• Unscored —
  CVE-2006-0295 Public exploit EPSS 71%

  Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote atta…

  thunderbird Debian
  Feb 2, 2006
• Unscored —
  CVE-2006-0522 Public exploit

  SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build …

  Feb 2, 2006
• Unscored —
  CVE-2006-0528 Public exploit EPSS 11%

  The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause …

  evolution Debian
  Feb 2, 2006
• Unscored —
  CVE-2006-0518 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier a…

  spip Debian
  Feb 2, 2006
• Unscored —
  CVE-2006-0520 Public exploit

  SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attack…

  Feb 2, 2006
• Unscored —
  CVE-2006-0524 Public exploit

  Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject…

  Feb 2, 2006
• Unscored —
  CVE-2003-1292 Public exploit

  PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbi…

  Feb 2, 2006
• Unscored —
  CVE-2006-0510 Public exploit

  SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL comma…

  Feb 1, 2006
• Unscored —
  CVE-2006-0509 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote att…

  Feb 1, 2006
• Unscored —
  CVE-2006-0502 Public exploit

  PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enab…

  Feb 1, 2006
• Medium —
  CVE-2005-4703 Public exploit EPSS 26%

  Apache Tomcat Discloses MS-DOS Pathname

  Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Ni…

  org.apache.tomcat:tomcat Maven
  Feb 1, 2006
• Unscored —
  CVE-2005-4696 Public exploit

  The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-…

  Feb 1, 2006
• Unscored —
  CVE-2005-4694 Public exploit

  Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6…

  Feb 1, 2006
• Unscored —
  CVE-2005-4702 Public exploit

  SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to injec…

  Feb 1, 2006
• Unscored —
  CVE-2005-4698 Public exploit

  Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web scri…

  Feb 1, 2006
• Unscored —
  CVE-2006-0491 Public exploit

  SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL …

  Feb 1, 2006
• Unscored —
  CVE-2006-0496 Public exploit

  Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly ear…

  Feb 1, 2006