Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attacker…
-
Unscored —
Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files …
-
Unscored —
Directory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to read certain fi…
-
Unscored —CVE-2006-0786 Public exploit
Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, …
-
Unscored —CVE-2006-0784 Public exploit
D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 0…
-
Unscored —
Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —
Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2006-0775 Public exploit
Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Unspecified vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to execute arbitrary shell …
-
Unscored —
Cross-site scripting (XSS) vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to inject ar…
-
Unscored —CVE-2006-0774 Public exploit
SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, …
-
Unscored —
SQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through …
-
Unscored —
CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause error…
-
Unscored —
Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send re…
-
Unscored —
Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games,…
-
Unscored —
Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unkn…
-
Unscored —
Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inj…
-
Unscored —
Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Liba…
-
Unscored —CVE-2005-4724 Public exploit
SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
GUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibl…
-
Unscored —CVE-2006-0757 Public exploit
Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP cod…
-
Unscored —
Cross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote attackers to inject arbitrary …
-
Unscored —
WinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain capabilities of the application …
-
Unscored —
Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would…
-
Unscored —CVE-2006-0758 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitr…
-
Unscored —
ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows versions allows user-ass…
-
Unscored —CVE-2006-0759 Public exploit
Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Multiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2) NOOFS daemon in in Networ…
-
Unscored —CVE-2006-0753 EPSS 12%
Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of…
-
Unscored —
Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 b…
-
Unscored —
LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass UR…
-
Unscored —
dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invali…
-
Unscored —CVE-2006-0750 Public exploit
SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) al…
-
Unscored —
dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after insta…
-
Unscored —
The Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3) of the software used b…
-
Medium 5.6CVE-2006-0755 Public exploit
Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, all…
-
Unscored —
eStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE request with a Content-…
-
Unscored —CVE-2006-0737 Public exploit
eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a nega…
-
Unscored —CVE-2006-0738 Public exploit
Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service (han…