Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
February

CVEs published in February 2006

448 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

hosting controller controllerSQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated...CVE-2006-05816.5 MediumFebruary 8, 2006
ibm lotus domino serverIBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation...CVE-2006-05805.0 MediumFebruary 8, 2006
mplayerMultiple integer overflows in (1) the new_demux_packet function in demuxer.h and (2) the...CVE-2006-05797.5 HighFebruary 8, 2006
bluecoat sgosBlue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 does not enforce CONNECT rules when using Deep...CVE-2006-05787.5 HighFebruary 8, 2006
lexmark x1185Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the ...CVE-2006-05777.2 HighFebruary 8, 2006
maynard johnson oprofileUntrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users...CVE-2006-05767.2 HighFebruary 8, 2006
thibault godouet fcronconvert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite...CVE-2006-05755.0 MediumFebruary 7, 2006
cpanelCross-site scripting (XSS) vulnerability in mime/handle.html in cPanel 10 allows remote attackers...CVE-2006-05744.3 MediumFebruary 7, 2006
cpanelMultiple cross-site scripting (XSS) vulnerabilies in cPanel 10 and earlier allow remote attackers...CVE-2006-05734.3 MediumFebruary 7, 2006
hinton design phpstatusphpstatus 1.0 does not require passwords when using cookies to identify a user, which allows...CVE-2006-05727.5 HighFebruary 7, 2006
hinton design phpstatusMultiple cross-site scripting (XSS) vulnerabilities in phpstatus 1.0 allow remote attackers to...CVE-2006-05714.3 MediumFebruary 7, 2006
hinton design phpstatusMultiple SQL injection vulnerabilities in phpstatus 1.0, when gpc_magic_quotes is disabled, allow...CVE-2006-05707.5 HighFebruary 7, 2006
papooCross-site scripting (XSS) vulnerability in user_class.php in Papoo 2.1.4 and earlier allows...CVE-2006-05694.3 MediumFebruary 7, 2006
outblazeCross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to...CVE-2006-05684.3 MediumFebruary 7, 2006
curtis farnham files xaraya moduleDirectory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory...CVE-2006-05675.0 MediumFebruary 7, 2006
linux kernelLinux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send,...CVE-2006-04545.0 MediumFebruary 7, 2006
communigate pro core serverThe LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial...CVE-2006-05665.0 MediumFebruary 6, 2006
gerrit van aaken loudblogPHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier...CVE-2006-0565Public exploit7.5 HighFebruary 6, 2006
microsoft html help, html help workshop +1 moreStack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier...CVE-2006-0564Public exploitEPSS 71.7%7.5 HighFebruary 6, 2006
pluggedout blogSQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to...CVE-2006-05637.5 HighFebruary 6, 2006
pluggedout blogCross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote...CVE-2006-05624.3 MediumFebruary 6, 2006
ibm tivoli access manager for e-businessDirectory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli...CVE-2006-0513Public exploit5.0 MediumFebruary 6, 2006
phpbb group phpbbCross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or...CVE-2006-04385.0 MediumFebruary 6, 2006
phpbb group phpbbCross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote...CVE-2006-04374.3 MediumFebruary 6, 2006
oracle database server, 10g enterprise manager grid control, application server +9 more +11 moreUnspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1...CVE-2006-05527.5 HighFebruary 4, 2006
oracle database serverSQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly...CVE-2006-05517.5 HighFebruary 4, 2006
oracle clientBuffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute...CVE-2006-05507.5 HighFebruary 4, 2006
oracle database serverSQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and...CVE-2006-0549Public exploit7.5 HighFebruary 4, 2006
oracle database serverSQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly...CVE-2006-05487.5 HighFebruary 4, 2006
oracle database serverOracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL...CVE-2006-05477.5 HighFebruary 4, 2006
egeinternetUnspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php...CVE-2006-05467.5 HighFebruary 4, 2006
ubbcentral ubb.threadsSQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6...CVE-2006-0545Public exploit7.5 HighFebruary 4, 2006
microsoft ieurlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to...CVE-2006-0544Public exploitEPSS 21.7%7.5 HighFebruary 4, 2006
cerulean studios trillianCerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash)...CVE-2006-05435.0 MediumFebruary 4, 2006
nukedweb guestbookhostMultiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow...CVE-2006-05427.5 HighFebruary 4, 2006
tachyon vanilla guestbookMultiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow...CVE-2006-05414.3 MediumFebruary 4, 2006
tachyon vanilla guestbookMultiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote...CVE-2006-05407.5 HighFebruary 4, 2006
thibault godouet fcronThe convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long...CVE-2006-0539Public exploit4.6 MediumFebruary 4, 2006
ciphertrust ironmailCipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote...CVE-2006-05382.6 LowFebruary 4, 2006
kinesphere corporation exchange pop3Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows...CVE-2006-0537Public exploitEPSS 41.5%7.5 HighFebruary 4, 2006
neomailCross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to...CVE-2006-05364.3 MediumFebruary 4, 2006
communityserver.org community serverMultiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to...CVE-2006-05354.3 MediumFebruary 4, 2006
cybershop asp ultimate e-commerce scriptMultiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E...CVE-2006-0534Public exploit4.3 MediumFebruary 4, 2006
cpanelCross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to...CVE-2006-05334.3 MediumFebruary 4, 2006
media2 cms shopCross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote...CVE-2006-0532Public exploit4.3 MediumFebruary 4, 2006
sun java system access managerUnspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as ...CVE-2006-05317.2 HighFebruary 4, 2006
mozilla firefox, seamonkey, thunderbird +2 moreThe E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript...CVE-2006-0299Fix available6.4 MediumFebruary 2, 2006
mozilla firefox, seamonkey +1 moreThe XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers...CVE-2006-0298Fix available5.8 MediumFebruary 2, 2006
mozilla firefox, seamonkey, thunderbird +2 moreMultiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in...CVE-2006-0297Fix available5.1 MediumFebruary 2, 2006
ca messagingComputer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build...CVE-2006-05305.0 MediumFebruary 2, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open