Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown imp…
-
Unscored —
mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, whi…
-
Unscored —
SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unsp…
-
Unscored —CVE-2006-0691 Public exploit
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows rem…
-
Unscored —CVE-2006-0713 Public exploit
Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) seq…
-
Unscored —
The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, wh…
-
Unscored —CVE-2006-0699 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows …
-
Unscored —
Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote att…
-
Unscored —CVE-2006-0700 Public exploit
imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which retur…
-
Unscored —
Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vec…
-
Unscored —CVE-2006-0703 Public exploit
Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulne…
-
Unscored —
Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly…
-
Unscored —
Hitachi TP1/Server Base and TP1/NET/Library 2 on IBM AIX allow remote attackers to (1) cause a denial of service (OpenT…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.cfm in tmsPUBLISHER 3.3 allows remote attackers to inject arbitrary …
-
Unscored —
Multiple SQL injection vulnerabilities in Sysbotz Systems Panel 1.0.6 and earlier allow remote attackers to execute arb…
-
Unscored —
Opera 8.02 and earlier allows remote attackers to cause a denial of service (client crash) via (1) a crafted HTML file …
-
Unscored —CVE-2005-4720 Public exploit
Mozilla Firefox 1.0.7 and earlier on Linux allows remote attackers to cause a denial of service (client crash) via an I…
-
Unscored —
_Request_Message.cfm in tmsPUBLISHER 3.3 allows remote attackers to obtain sensitive information via an invalid id argu…
-
Unscored —CVE-2005-4723 Public exploit
D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (…
-
Unscored —
Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows S…
-
Unscored —
The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a d…
-
Unscored —
Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous reg…
-
Unscored —CVE-2006-0681 Public exploit
Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier al…
-
Unscored —
add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a …
-
Unscored —CVE-2006-0687 Public exploit
process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows …
-
Unscored —CVE-2006-0684 Public exploit
change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to in…
-
Unscored —CVE-2006-0685 Public exploit
The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when a…
-
Unscored —
Multiple stack-based buffer overflows in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lotus Notes 6.…
-
Unscored —
Directory traversal vulnerability in kvarcve.dll in Autonomy (formerly Verity) KeyView SDK before 9.2.0, as used in Lot…
-
Unscored —
The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a cer…
-
Unscored —
Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, …
-
Unscored —
dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (…
-
Unscored —
Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of …
-
Unscored —
Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call.
-
Unscored —CVE-2006-0004 EPSS 32%
Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to …
-
Unscored —
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) l…
-
Unscored —
PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the …
-
Unscored —CVE-2006-0013 EPSS 35%
Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1…