Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandb…
-
Unscored —CVE-2006-0624 Public exploit
SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitr…
-
Unscored —
Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argum…
-
Unscored —CVE-2005-1528 Public exploit
Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitr…
-
Unscored —
Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload …
-
Unscored —
Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote att…
-
Unscored —
Powersave daemon before 0.10.15.2 allows local users to gain privileges (unauthorized access to an X session) via unspe…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inj…
-
Unscored —
SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote at…
-
Unscored —
Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary…
-
Unscored —
Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —
Cross-site scripting (XSS) vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitr…
-
Unscored —
Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers…
-
Unscored —
check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which …
-
Unscored —
Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure d…
-
Unscored —
The PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store user passwords, which …
-
Unscored —CVE-2006-0585 EPSS 15%
jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (ap…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to inject arbitrary web …
-
Unscored —
Multiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the demux_asf_read_packet function…
-
Unscored —
Unspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when storing forwarded credenti…
-
Unscored —CVE-2006-0586 Public exploit
Multiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote attackers to execute ar…
-
Unscored —
IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted pac…
-
Unscored —
SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leak…
-
Unscored —
Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows…
-
Unscored —
Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep Content Inspection, w…
-
Unscored —CVE-2006-0583 Public exploit
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitr…
-
Unscored —
The crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in crypt_blow…
-
Unscored —
MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which l…
-
Unscored —
SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary…
-
Unscored —
Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner…
-
Unscored —
Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary …
-
Unscored —
Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecti…
-
Unscored —
convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." seque…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web scr…
-
Unscored —
Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify C…
-
Unscored —
Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow remote attackers to e…
-
Unscored —
Cross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to inject arbitrary web scri…
-
Unscored —
Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle…