Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long erro…
-
Unscored —
SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers…
-
Unscored —
Multiple race conditions in the handling of O_DIRECT in Linux kernel prior to version 2.4.22 could cause stale data to …
-
Unscored —
SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-0721 Public exploit
SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-0728 Public exploit
SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to in…
-
Unscored —
settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to…
-
Unscored —
SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nu…
-
Unscored —
profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to …
-
Unscored —
Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete …
-
Unscored —
PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_glob…
-
Unscored —
Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (ap…
-
Unscored —CVE-2006-0735 Public exploit
Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products suc…
-
Unscored —CVE-2006-0734 Public exploit
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remo…
-
Unscored —CVE-2006-0733 Public exploit
Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2006-0731 Public exploit
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (…
-
Unscored —CVE-2006-0725 Public exploit
PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows rem…
-
Unscored —CVE-2006-0455 Public exploit
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even…
-
Unscored —CVE-2006-0719 Public exploit
SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute…
-
Unscored —
The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when runn…
-
Unscored —CVE-2006-0706 Public exploit
Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inje…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attac…
-
Unscored —
Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary…
-
Unscored —
Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allo…
-
Unscored —CVE-2006-0715 Public exploit
Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —CVE-2006-0710 Public exploit
Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2006-0717 Public exploit
IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request…
-
Unscored —CVE-2006-0705 EPSS 10%
Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflecti…
-
Unscored —
iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain …
-
Unscored —
Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-0714 Public exploit
Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote atta…
-
Unscored —CVE-2006-0702 Public exploit
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (…
-
Unscored —
SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-0701 Public exploit
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
-
Unscored —
PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP…
-
Unscored —CVE-2006-0688 Public exploit
PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attacker…
-
Unscored —
Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) …
-
Unscored —
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute ar…
-
Unscored —
Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code …