Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang…
-
Unscored —
PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Ass…
-
Unscored —
The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Win…
-
Unscored —
Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Inte…
-
Unscored —CVE-2005-3058 Public exploit
Interpretation conflict in Fortinet FortiGate 2.8, running FortiOS 2.8MR10 and v3beta, allows remote attackers to bypas…
-
Unscored —
The FTP component in FortiGate 2.8 running FortiOS 2.8MR10 and v3beta, and other versions before 3.0 MR1, allows remote…
-
Unscored —
telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial …
-
Unscored —
Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly …
-
Unscored —
Unspecified vulnerability in HP PSC 1210 All-in-One Drivers before 1.0.06 has unknown impact and attack vectors.
-
Unscored —
Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of…
-
Unscored —CVE-2006-0669 Public exploit
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-0673 Public exploit
Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, al…
-
Unscored —CVE-2006-0675 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary w…
-
Unscored —
Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wirel…
-
Unscored —CVE-2006-0676 Public exploit
Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-0668 Public exploit
SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-0671 Public exploit
Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of …
-
Unscored —CVE-2005-4714 Public exploit
Format string vulnerability in the vmps_log function in OpenVMPS (VLAN Management Policy Server) 1.3 allows remote atta…
-
Unscored —
Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote …
-
Unscored —
The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whethe…
-
Unscored —
Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of serv…
-
Unscored —
elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite redirection) via a request wit…
-
Unscored —
Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers…
-
Unscored —
Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arb…
-
Unscored —
squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumpti…
-
Unscored —CVE-2006-0651 Public exploit
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID…
-
Unscored —CVE-2006-0663 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers …
-
Unscored —CVE-2006-0650 Public exploit
Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in DataparkSearch before 4.37 allows remote attackers to inject arbitrary web …
-
Unscored —
Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows remote attackers to inj…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inj…
-
Unscored —
Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impa…
-
Unscored —CVE-2006-0660 Public exploit
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary…
-
Unscored —
check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attac…
-
Unscored —CVE-2006-0647 Public exploit
LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote atta…
-
Unscored —
Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inje…
-
Unscored —
Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, whe…
-
Unscored —CVE-2006-0659 Public exploit
Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen e…
-
Unscored —CVE-2006-0658 Public exploit
Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allow…