Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
524 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phph…
-
Unscored —
WHMCompleteSolution (WHMCS) before 2.3 assigns incorrect permissions to "resellers", which allows remote authenticated …
-
Unscored —
Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrar…
-
Unscored —
Unspecified vulnerability in the SQL logging facility in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3 allows r…
-
Unscored —
nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on f…
-
Unscored —
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH…
-
Unscored —
CRLF injection vulnerability in process_signup.php in PHP Handicapper allows remote attackers to inject arbitrary HTTP …
-
Unscored —
Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) …
-
Unscored —CVE-2006-0644 Public exploit
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 a…
-
Unscored —
Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing t…
-
Unscored —
SQL injection vulnerability in moderation.php in MyBB (aka MyBulletinBoard) 1.0.3 allows remote authenticated users, wi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WiredRed e/pop Web Conferencing 4.1.0.755 allows remote authenticated users…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in MyBB (aka MyBulletinBoard) 1.0.2 allows remote attackers with…
-
Unscored —
Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent_upd4) evaluates the "i>sizeof(int)" expression t…
-
Unscored —
Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command …
-
Unscored —
The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partiall…
-
Unscored —
desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_star…
-
Unscored —CVE-2006-0637 Public exploit
Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an I…
-
Unscored —
The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activati…
-
Unscored —
Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have …
-
Unscored —
Tiny C Compiler (TCC) 0.9.23 (aka TinyCC) evaluates the "i>sizeof(int)" expression to false when i equals -1, which mig…
-
Unscored —
RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME mess…
-
Unscored —CVE-2006-0628 Public exploit
myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the…
-
Unscored —
CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "s…
-
Unscored —
Unspecified vulnerability in AOL Instant Messenger (AIM) 5.9.3861 allows user-assisted remote attackers to cause a deni…
-
Unscored —
SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-0626 Public exploit
SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-0625 Public exploit
Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include…
-
Unscored —
Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass …
-
Unscored —
Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via f…
-
Unscored —CVE-2006-0620 Public exploit
Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipu…
-
Unscored —CVE-2006-0623 Public exploit
QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify th…
-
Unscored —
QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break *0xb032d59f" comma…
-
Unscored —
Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.…
-
Unscored —
Unspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5 and earlier, allows remote att…
-
Unscored —
Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (…
-
Unscored —
Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_…