Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multipl…
-
Unscored —
The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (…
-
Unscored —
Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote atta…
-
Unscored —
The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the att…
-
Unscored —
Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote at…
-
Unscored —
The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, whic…
-
Unscored —
Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alp…
-
Unscored —
The default configuration of the America Online (AOL) client software allows all users to modify a certain registry val…
-
Unscored —
SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via…
-
Unscored —CVE-2006-0522 Public exploit
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build …
-
Unscored —
BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via…
-
Unscored —
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause …
-
Unscored —CVE-2006-0518 Public exploit
Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier a…
-
Unscored —
PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a …
-
Unscored —CVE-2006-0520 Public exploit
SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attack…
-
Unscored —
Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large n…
-
Unscored —
Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows l…
-
Unscored —
SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2006-0524 Public exploit
Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject…
-
Unscored —
Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web s…
-
Unscored —
Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement …
-
Unscored —
The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains th…
-
Unscored —
Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia …
-
Unscored —CVE-2003-1292 Public exploit
PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2006-0510 Public exploit
SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web…
-
Unscored —
Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled,…
-
Unscored —CVE-2006-0509 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote att…
-
Unscored —
Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2006-0502 Public exploit
PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enab…
-
Unscored —
MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in rlink.php in Rlink 1.0.0 module for phpBB allows remote attackers to inject…
-
Unscored —
Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of serv…
-
Unscored —
IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (servi…
-
Unscored —
Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses pred…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary we…
-
Unscored —
Multiple SQL injection vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary SQL commands vi…