Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —CVE-2006-0857 Public exploit
Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrar…
-
Unscored —
SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-0865 Public exploit
PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering man…
-
Unscored —
Buffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08 build 1131 and version 8, …
-
Unscored —CVE-2006-0869 Public exploit
Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Reposit…
-
Unscored —
filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to …
-
Unscored —
Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses o…
-
Unscored —CVE-2006-0870 Public exploit
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute a…
-
Unscored —
Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified in…
-
Unscored —
Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remot…
-
Unscored —
InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a…
-
High —
PEAR::Auth potential authentication bypass vulnerability
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."
-
Unscored —
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of servic…
-
Unscored —
Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Ba…
-
Unscored —
The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that i…
-
Unscored —
The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6…
-
Unscored —CVE-2005-3525 EPSS 20%
Stack-based buffer overflow in an ActiveX control for the installer for Adobe Macromedia Shockwave Player 10.1.0.11 and…
-
Unscored —CVE-2006-0851 Public exploit
SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-0852 Public exploit
Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute…
-
Unscored —
PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to inc…
-
Unscored —
Buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows remote authenticated u…
-
Unscored —
SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to exec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in gbook.cgi in gBook before 1.0.2 allows remote attackers to inject arbitrary…
-
Unscored —
The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to e…
-
Unscored —CVE-2006-0841 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbi…
-
Unscored —
Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, whic…
-
Unscored —
Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which …
-
Unscored —
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (…
-
Unscored —
The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP option…
-
Unscored —CVE-2006-0836 Public exploit
Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script o…
-
Unscored —
manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) cha…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbit…
-
Unscored —CVE-2006-0835 Public exploit
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL…
-
Unscored —
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/Neu…
-
Unscored —
Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access contro…
-
High 7.5
CherryPy Directory traversal vulnerability
Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.
-
Unscored —
Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary program…
-
Unscored —CVE-2006-0832 Public exploit
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL command…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitra…