CVEs published in February 2006
448 vulnerabilities, 15 critical, 0 exploited.
- reamday enterprises magic news litePHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2...2.6 Low
- reamday enterprises magic downloadssettings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled,...2.6 Low
- runcmsSQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to...7.5 High
- deltascripts php classifiedsSQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows...7.5 High
- gnu privacy guardgpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code...4.6 Medium
- avaya csu 5000, vsu 100, vsu 10000 +2 more +4 moreThe Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000,...5.0 Medium
- ibm tivoli directory serverIBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via...5.0 Medium
- solucija snewsSQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute...7.5 High
- solucija snewsCross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary...4.3 Medium
- flysprayDirectory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0...5.0 Medium
- linphaDirectory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary...5.0 Medium
- squishdotmail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2...5.0 Medium
- neomailThe (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not...5.0 Medium
- isode m-vault serverDouble free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to...7.5 High
- metamail corporation metamailBuffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service ...7.5 High
- nullsoft winampMultiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute...9.3 High
- pyblosxomPyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read...5.0 Medium
- gastebuchCross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows...4.3 Medium
- f-secure ssh server, attachmatewrq reflection for secure it server +1 moreFormat string vulnerability in a logging function as used by various SFTP servers, including (1)...6.5 Medium
- ie integratoriE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows...2.6 Low
- imagevueUnspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site...4.3 Medium
- imagevueadmin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain...5.0 Medium
- imagevuereadfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and...5.0 Medium
- imagevueimageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request...5.0 Medium
- david barrett qwikiwikiCross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and...4.3 Medium
- zen cart cartUnspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown...10.0 High
- zen-cart zen cartZen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote...10.0 High
- zen cart cartSQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary...7.5 High
- ansiloveAnsilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to...7.5 High
- ansiloveUnspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote...5.0 Medium
- roberto butti calimbaMultiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and...7.5 High
- carey briggs php mysql timesheetMultiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote...7.5 High
- scheduling management.com time tracking softwareedituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are...5.0 Medium
- scheduling management.com time tracking softwareMultiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers...7.5 High
- scheduling management.com time tracking softwareCross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3...4.3 Medium
- nicecoder indexuPHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1...7.5 High
- ibm aixUnspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30...4.9 Medium
- docmgrprocess.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request...5.0 Medium
- virtual hosting control system hosting control systemadd_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user...10.0 High
- virtual hosting control system hosting control systemThe check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and...10.0 High
- virtual hosting control system hosting control systemchange_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify...7.5 High
- virtual hosting control system hosting control systemCross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v...4.3 Medium
- e107Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow...4.3 Medium
- power daemon daemonFormat string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote...7.5 High
- plain black webguiUnspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an...5.0 Medium
- redhat fedora coreThe LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of...7.8 High
- redhat fedora coredn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause...5.0 Medium
- redhat fedora coreMultiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers...5.0 Medium
- apple mac os xApple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an...2.1 Low
- microsoft windows 2000, windows me, windows media player +4 more +6 moreHeap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1...9.3 High
- Show moreLoading…