Skip to content
OpenAdvisories

Archive

February 2006

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • High —

    PEAR::Auth potential authentication bypass vulnerability

    Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

  • High 7.5

    CherryPy Directory traversal vulnerability

    Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.