Skip to content
OpenAdvisories

Archive

February 2006

Vulnerabilities first published in this month (UTC), newest first.

524 results · Feed

  • Unscored —

    Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 all…

  • Unscored —

    Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkC…

  • Unscored —

    Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of serv…

  • Unscored —

    Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xe…

  • Unscored —
    CVE-2006-0823 Public exploit

    Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attack…

  • Unscored —

    Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —

    Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and …

  • Unscored —
    CVE-2006-0821 Public exploit

    SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-0830 EPSS 14%

    The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) a…

  • Unscored —

    Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkC…

  • Unscored —

    PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP …

  • Unscored —

    The original patch for a GNU tar directory traversal vulnerability (CVE-2002-0399) in Red Hat Enterprise Linux 3 and 2.…

  • Unscored —

    Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitr…

  • Unscored —

    Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-0806 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow r…

  • Unscored —
    CVE-2006-0805 Public exploit

    The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day b…

  • Unscored —

    Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —

    MUTE 0.4 allows remote attackers to cause a denial of service (messages not forwarded) and obtain sensitive information…

  • Unscored —

    MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information (priv…

  • Unscored —

    Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trig…

  • Unscored —
    CVE-2006-0801 Public exploit

    SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, al…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_g…

  • Unscored —
    CVE-2006-0800 Public exploit

    Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) att…

  • Unscored —

    Geeklog before 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary sto…

  • Unscored —
    CVE-2006-0791 Public exploit

    PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrar…

  • Unscored —

    Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitr…

  • Unscored —

    frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites i…

  • Unscored —

    Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing …

  • Unscored —

    Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-0797 Public exploit

    Nokia N70 cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluet…

  • Unscored —

    help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters.…

  • Unscored —

    Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets…

  • Unscored —
    CVE-2006-0792 Public exploit

    Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inje…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier allow remote attackers t…

  • Unscored —

    Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to i…

  • Unscored —
    CVE-2006-0783 Public exploit

    Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote …

  • Unscored —
    CVE-2006-0787 Public exploit

    wimpy_trackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary …

  • Unscored —

    Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration sett…