Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial …
-
Unscored —
TellMe 1.2 and earlier, when the Server (o_Server) and HEAD (o_Head) options are enabled, allows remote attackers to ob…
-
Unscored —
Gaim-Encryption 2.38-1 on Debian Linux allows remote attackers to cause a denial of service (crash) via a crafted messa…
-
Medium —
Apache Tomcat Discloses MS-DOS Pathname
Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Ni…
-
Unscored —
Symantec Brightmail AntiSpam 6.0 build 1 and 2 allows remote attackers to cause a denial of service (bmserver component…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.3 allow remote attackers to inject arbitrary we…
-
Unscored —
Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 through SP3, 7.0 through SP6, and 6.1 through…
-
Unscored —CVE-2005-4696 Public exploit
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-…
-
Unscored —CVE-2005-4694 Public exploit
Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6…
-
Unscored —
Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive info…
-
Unscored —CVE-2005-4702 Public exploit
SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to injec…
-
Unscored —
Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for…
-
Unscored —
Unspecified vulnerability in mroovca stats (mroovcastats) before 0.4.5b has unknown attack vectors and impact, related …
-
Unscored —CVE-2005-4698 Public exploit
Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —
BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7, when a Java client appl…
-
Unscored —
The Microsoft Wireless Zero Configuration system (WZCS) allows local users to access WEP keys and pair-wise Master Keys…
-
Unscored —
VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VM…
-
Unscored —
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and …
-
Unscored —
Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trig…
-
Unscored —
Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long str…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinB…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arb…
-
Unscored —
SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execu…
-
Unscored —CVE-2006-0491 Public exploit
SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via (1) t…
-
Unscored —
The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases befor…
-
Unscored —
Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privil…
-
Unscored —
The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Window…
-
Unscored —CVE-2006-0496 Public exploit
Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly ear…
-
Unscored —
imake in NetBSD before 2.0.3, NetBSD-current before 12 September 2005, certain versions of X.Org, and certain versions …
-
Unscored —
Buffer overflow in mIRC 5.91, 6.03, 6.12, and 6.16 allows local users to execute arbitrary code via a long string that …
-
Unscored —
PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTT…
-
Unscored —
PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow…
-
Unscored —
PunBB 1.2.9, when used alone or with F-ART BLOG:CMS, includes config.php before calling the unregister_globals function…
-
Unscored —
Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its sea…
-
Unscored —
PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file…
-
Unscored —
Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, …
-
Unscored —
Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to h…
-
Unscored —
Six Apart Movable Type 3.16 stores account names and password hashes in a cookie, which allows remote attackers to logi…
-
Unscored —
Six Apart Movable Type 3.16 allows local users with blog-creation privileges to create or overwrite arbitrary files of …