Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers to inject arbitrary w…
-
Unscored —
phpstatus 1.0 does not require passwords when using cookies to identify a user, which allows remote attackers to bypass…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows remote attackers to inject…
-
Unscored —
Cross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers to inject arbitrary w…
-
Unscored —
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included…
-
Unscored —
Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arb…
-
Unscored —CVE-2006-0513 Public exploit
Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.…
-
Unscored —CVE-2006-0565 Public exploit
PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers t…
-
Unscored —
SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (applicati…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote attackers to inject arbitra…
-
Unscored —
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9…
-
Unscored —
Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to exe…
-
Unscored —
urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2006-0545 Public exploit
SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows r…
-
Unscored —
SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might a…
-
Unscored —CVE-2006-0549 Public exploit
SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inj…
-
Unscored —
Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of …
-
Unscored —
SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remot…
-
Unscored —
Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.co…
-
Unscored —
Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause…
-
Unscored —CVE-2006-0539 Public exploit
The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument…
-
Unscored —
Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message cont…
-
Unscored —
Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrar…
-
Unscored —
Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrar…
-
Unscored —
Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authen…
-
Unscored —CVE-2006-0534 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attack…
-
Unscored —
Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to exec…
-
Unscored —CVE-2006-0532 Public exploit
Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web …
-
Unscored —
CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web …
-
Unscored —
Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web …
-
Unscored —
The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey …
-
Unscored —
Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey befo…
-
Unscored —
The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of …
-
Unscored —
Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multipl…