Archive
2 June 2006
Vulnerabilities first published on this day (UTC), newest first.
42 results · Feed
-
Unscored —
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote a…
-
Unscored —
A package component in Sun Storage Automated Diagnostic Environment (StorADE) 2.4 uses world-writable permissions for c…
-
Unscored —
Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denia…
-
Unscored —
HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy s…
-
Unscored —
EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascri…
-
Unscored —
Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the pag…
-
Unscored —
Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service…
-
Unscored —
Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote…
-
Unscored —
The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privil…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inj…
-
Unscored —
Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly…
-
Unscored —
Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitr…
-
Unscored —
Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execu…
-
Unscored —
Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object…
-
Unscored —
The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbit…
-
Unscored —
Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified c…
-
Unscored —CVE-2006-2767 Public exploit
PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to …
-
Unscored —
admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote …
-
Unscored —
The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent…
-
Unscored —CVE-2006-2770 Public exploit
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inje…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-2771 Public exploit
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attac…
-
Unscored —CVE-2006-2768 Public exploit
PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to e…
-
Unscored —
VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might al…
-
Unscored —
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook …
-
Unscored —
SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-2755 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script o…
-
Unscored —
Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service (application crash) via a long GET reques…
-
Unscored —
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrict…
-
Unscored —
The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/…
-
Medium —CVE-2006-2758 Public exploit
Jetty Directory Traversal Vulnerability
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.
-
Unscored —
PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or H…
-
Medium 5.3
Improper Input Validation in Mortbay Jetty
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.
-
Unscored —
SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in news_information.php in Interlink Advantage allows remote attackers to inje…
-
Unscored —CVE-2006-2763 Public exploit
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2,…