CVEs published in February 2006
448 vulnerabilities, 15 critical, 0 exploited.
- invisionpower invision power boardThe make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data...6.4 Medium
- phpbb group phpbbThe gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space)...6.4 Medium
- erik c. thauvin mailbackCRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers...5.0 Medium
- ritlabs the batRITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in...5.0 Medium
- aol instant messengerUnspecified vulnerability in AOL Instant Messenger (AIM) 5.9.3861 allows user-assisted remote...5.1 Medium
- dale ray myquizmyquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell...7.5 High
- stefan ritt elog web logbookelog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite...5.0 Medium
- stefan ritt elog web logbookThe (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different...5.0 Medium
- stefan ritt elog web logbookBuffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via...7.5 High
- stefan ritt elog web logbookMultiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to...7.5 High
- clever copy copyCross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote...4.3 Medium
- spipSQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote...7.5 High
- spipDirectory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote...6.4 Medium
- webeveyn whomp real estate manager xp 2005SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote...7.5 High
- qnx rtosQNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows...7.2 High
- qnx rtosQNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a ...4.9 Medium
- qnx rtosMultiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code...7.2 High
- qnx rtosRace condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code...6.2 Medium
- qnx rtosMultiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute...4.6 Medium
- qnx neutrino rtosFormat string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to...4.6 Medium
- sun jdk, jre +1 moreMultiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow...4.0 Medium
- sun jdk, jre +1 moreUnspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote...4.0 Medium
- sun jdk, jre, sdk +2 moreMultiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and...4.0 Medium
- sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x...6.4 Medium
- sun j2seUnspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5 and...4.0 Medium
- powersavePowersave daemon before 0.10.15.2 allows local users to gain privileges (unauthorized access to...4.6 Medium
- atmailDirectory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows...7.5 High
- 2200net calendarMultiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes...7.5 High
- cameron simpson adzappersquid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of...7.8 High
- hinton design phphdCross-site scripting (XSS) vulnerability in add.php in Hinton Design phphd 1.0 allows remote...4.3 Medium
- hinton design phphdMultiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to...7.5 High
- hinton design phphdcheck.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided,...7.5 High
- unknown domain shoutboxSQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to...7.5 High
- unknown domain shoutboxMultiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow...4.3 Medium
- hinton design phphg guestbookcheck.php in Hinton Design phphg Guestbook 1.2 does not check the user password when...7.5 High
- hinton design phphg guestbookMultiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2...6.4 Medium
- hinton design phphg guestbookMultiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote...7.5 High
- microsoft windows xpMicrosoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and...4.3 Medium
- php fusion fusionCross-site scripting (XSS) vulnerability in PHP-Fusion before 6.00.304 allows remote attackers to...4.3 Medium
- lexmark printer sharingUnspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly...7.5 High
- solar designer crypt blowfishThe crypt_gensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based...1.2 Low
- jaia interactive mytopixMyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter...5.0 Medium
- jaia interactive mytopixMyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to...5.0 Medium
- jaia interactive mytopixSQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute...7.5 High
- gallery project galleryUnspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated...6.5 Medium
- oracle application server, oracle10g +1 moreMultiple SQL injection vulnerabilities in Oracle 10g Release 1 before CPU Jan 2006 allow remote...7.5 High
- microsoft internet explorerjscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a...5.0 Medium
- peoplesoft peopletoolsThe PSCipher function in PeopleSoft People Tools 8.4x uses PKCS #5 with a fixed DES key to store...2.1 Low
- clever copy copySQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote...7.5 High
- kth heimdalUnspecified vulnerability in rshd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2, when...2.1 Low
- Show moreLoading…