Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —CVE-2006-0899 Public exploit
Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include…
-
Unscored —
Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows unspecified attackers to cause a denial…
-
Unscored —CVE-2006-0891 Public exploit
Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via …
-
Unscored —
Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2) SpeedCommander 11.01.4…
-
Unscored —CVE-2006-0888 Public exploit
index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an uns…
-
Unscored —
Cross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows remote attackers to in…
-
Unscored —CVE-2006-0885 Public exploit
Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for rem…
-
Unscored —
SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote atta…
-
Unscored —
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles direc…
-
Unscored —
Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, …
-
Unscored —
NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.
-
Unscored —CVE-2006-0887 Public exploit
Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib …
-
Unscored —CVE-2006-0894 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-0884 Public exploit
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacke…
-
Unscored —
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to ca…
-
Unscored —CVE-2006-0879 Public exploit
SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary S…
-
Unscored —
Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers…
-
Unscored —CVE-2006-0875 Public exploit
Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-0877 Public exploit
Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via…
-
Unscored —
Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header b…
-
Unscored —CVE-2006-0881 Public exploit
Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals…
-
Unscored —CVE-2006-0882 Public exploit
Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary…
-
Unscored —
Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote …
-
Unscored —CVE-2006-0871 Public exploit
Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions al…
-
Unscored —
Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact,…
-
Unscored —
Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, a…
-
Unscored —CVE-2006-0880 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to in…
-
Unscored —
POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors …
-
Unscored —CVE-2005-2934 Public exploit
Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecifi…
-
Unscored —
Buffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of service (application cr…
-
Unscored —
webmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages into the right frame v…
-
Unscored —
CRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary IMAP commands v…
-
Unscored —
Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross…
-
Unscored —
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from ad…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allo…
-
Unscored —
PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, whi…
-
Unscored —
Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guest…