Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
February

CVEs published in February 2006

448 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

perlblogDirectory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote...CVE-2006-07815.0 MediumFebruary 19, 2006
perlblogMultiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier...CVE-2006-07804.3 MediumFebruary 19, 2006
xmb forum xmbCross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote...CVE-2006-07794.3 MediumFebruary 19, 2006
xmb forum xmbMultiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to...CVE-2006-07787.5 HighFebruary 19, 2006
teca scripts guestexUnspecified vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to...CVE-2006-07777.5 HighFebruary 19, 2006
teca scripts guestexCross-site scripting (XSS) vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote...CVE-2006-07764.3 MediumFebruary 19, 2006
ridder roeland birthsysMultiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to...CVE-2006-0775Public exploit7.5 HighFebruary 19, 2006
lawrence osiris db esessionSQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used...CVE-2006-0774Public exploit7.5 HighFebruary 19, 2006
hitachi business logicCross-site scripting (XSS) vulnerability in Hitachi Business Logic - Container 02-03 through 03...CVE-2006-07734.3 MediumFebruary 19, 2006
hitachi business logicSQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on...CVE-2006-07727.5 HighFebruary 19, 2006
even balance punkbusterFormat string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and...CVE-2006-07716.4 MediumFebruary 18, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows...CVE-2006-07702.6 LowFebruary 18, 2006
sun solarisUnspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on...CVE-2006-07697.2 HighFebruary 18, 2006
kaduKadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large...CVE-2006-07685.0 MediumFebruary 18, 2006
nathan neulinger cgiwrapCGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack...CVE-2006-07675.0 MediumFebruary 18, 2006
apache libapreq2, debian linux +1 moreUnspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in...CVE-2006-0042Fix available5.0 MediumFebruary 18, 2006
mirabilis icq, icq lite +1 moreICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0, Lite 4.1, and possibly other Windows...CVE-2006-07665.1 MediumFebruary 18, 2006
mirabilis icq, icq lite +1 moreGUI display truncation vulnerability in ICQ Inc. (formerly Mirabilis) ICQ 2003a, 2003b, Lite 4.0,...CVE-2006-07655.1 MediumFebruary 18, 2006
cisco anomaly guard module, guard, traffic anomaly detector module +2 moreThe Authentication, Authorization, and Accounting (AAA) capability in versions 5.0(1) and 5.0(3)...CVE-2006-07645.1 MediumFebruary 18, 2006
cpanelCross-site scripting (XSS) vulnerability in dowebmailforward.cgi in cPanel allows remote...CVE-2006-07634.3 MediumFebruary 18, 2006
winability folder guardWinAbility Folder Guard 4.11 allows local users to gain unauthorized access to certain...CVE-2006-07624.6 MediumFebruary 18, 2006
rim blackberry enterprise serverBuffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry...CVE-2006-07615.1 MediumFebruary 18, 2006
lighttpdLightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote...CVE-2006-07602.6 LowFebruary 18, 2006
hivemailMultiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to...CVE-2006-0759Public exploit7.5 HighFebruary 18, 2006
hivemailMultiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote...CVE-2006-0758Public exploit4.3 MediumFebruary 18, 2006
hivemailMultiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to...CVE-2006-0757Public exploit7.5 HighFebruary 18, 2006
dotproject** DISPUTED ** dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible...CVE-2006-0756Disputed5.0 MediumFebruary 18, 2006
dotproject** DISPUTED ** Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier,...CVE-2006-0755Public exploitDisputed5.1 MediumFebruary 18, 2006
dotproject** DISPUTED ** dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive...CVE-2006-0754Disputed5.0 MediumFebruary 18, 2006
microsoft ieMemory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote...CVE-2006-0753EPSS 11.8%2.6 LowFebruary 18, 2006
niels provos honeydNiels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack...CVE-2006-07525.0 MediumFebruary 18, 2006
noofs team network object oriented file systemMultiple unspecified vulnerabilities in the (1) Filesystem in USErspace (FUSE) client and (2)...CVE-2006-075110.0 HighFebruary 18, 2006
supersmashbrothers army systemSQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for...CVE-2006-0750Public exploit7.5 HighFebruary 18, 2006
estara softphoneeStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE...CVE-2006-07395.0 MediumFebruary 17, 2006
estara softphoneMultiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a...CVE-2006-0738Public exploit5.0 MediumFebruary 17, 2006
estara softphoneeStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP...CVE-2006-0737Public exploit5.0 MediumFebruary 17, 2006
bombercloneMultiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute...CVE-2006-0460Public exploitFix availableEPSS 68.4%7.5 HighFebruary 17, 2006
francisco burzi php-nuke evSQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier...CVE-2006-06797.5 HighFebruary 16, 2006
fuzzymonkey my blog, m blom html-bbcode +1 moreCross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier,...CVE-2006-0735Public exploit4.3 MediumFebruary 16, 2006
valve software half-life cstrike dedicated serverThe SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6...CVE-2006-0734Public exploit4.0 MediumFebruary 16, 2006
wordpress** DISPUTED ** Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote...CVE-2006-0733Public exploitDisputed2.6 LowFebruary 16, 2006
sap business connectorDirectory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote...CVE-2006-07326.4 MediumFebruary 16, 2006
sap business connectorWmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers...CVE-2006-0731Public exploit4.0 MediumFebruary 16, 2006
timo sirainen dovecotMultiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a...CVE-2006-0730Fix available5.0 MediumFebruary 16, 2006
teca scripts diarySQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to...CVE-2006-07297.5 HighFebruary 16, 2006
webspellSQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers...CVE-2006-0728Public exploit7.5 HighFebruary 16, 2006
musox df msanalysisSQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some...CVE-2006-07277.5 HighFebruary 16, 2006
cpg-nuke dragonfly cmsCross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows...CVE-2006-07264.3 MediumFebruary 16, 2006
plume-cms plume cmsPHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals...CVE-2006-0725Public exploit6.8 MediumFebruary 16, 2006
reamday enterprises magic news liteprofile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled,...CVE-2006-07242.6 LowFebruary 16, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open