Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
February

CVEs published in February 2006

448 vulnerabilities, 15 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

dev web management systemCross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows...CVE-2006-08864.3 MediumFebruary 25, 2006
cutephp cutenewsCross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote...CVE-2006-0885Public exploit4.3 MediumFebruary 25, 2006
mozilla thunderbirdThe WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows...CVE-2006-0884Public exploitFix available9.3 HighFebruary 24, 2006
phpoutsourcing noahs classifiedsDirectory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote...CVE-2006-0882Public exploit5.0 MediumFebruary 24, 2006
phpoutsourcing noahs classifiedsMultiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3,...CVE-2006-0881Public exploit7.5 HighFebruary 24, 2006
phpoutsourcing noahs classifiedsMultiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow...CVE-2006-0880Public exploit4.3 MediumFebruary 24, 2006
phpoutsourcing noahs classifiedsSQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers...CVE-2006-0879Public exploit7.5 HighFebruary 24, 2006
phpoutsourcing noahs classifiedsNoah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct...CVE-2006-08785.0 MediumFebruary 24, 2006
easy forum forumCross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary...CVE-2006-0877Public exploit5.0 MediumFebruary 24, 2006
popfilePOPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash)...CVE-2006-0876Fix available5.0 MediumFebruary 24, 2006
runcmsCross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to...CVE-2006-0875Public exploit5.0 MediumFebruary 24, 2006
intensive point iuser ecommerceMultiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have...CVE-2006-087410.0 HighFebruary 24, 2006
coppermine photo galleryAbsolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and...CVE-2006-08735.0 MediumFebruary 24, 2006
coppermine photo galleryDirectory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier...CVE-2006-08725.0 MediumFebruary 24, 2006
mamboDirectory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and...CVE-2006-0871Public exploit6.4 MediumFebruary 24, 2006
winaceHeap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary...CVE-2006-08135.1 MediumFebruary 24, 2006
squirrelmailCRLF injection vulnerability in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject...CVE-2006-03775.0 MediumFebruary 24, 2006
gnu tarBuffer overflow in tar 1.14 through 1.15.90 allows user-assisted attackers to cause a denial of...CVE-2006-0300Fix available5.1 MediumFebruary 24, 2006
squirrelmailInterpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote...CVE-2006-01954.3 MediumFebruary 24, 2006
squirrelmailwebmail.php in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to inject arbitrary web pages...CVE-2006-01884.3 MediumFebruary 24, 2006
mini-nuke cmsSQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote...CVE-2006-0870Public exploit7.5 HighFebruary 23, 2006
pear liveuserDirectory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension...CVE-2006-0869Public exploit6.4 MediumFebruary 23, 2006
pear xml rpcPEAR::Auth potential authentication bypass vulnerabilityCVE-2006-0868Fix available7.5 HighFebruary 23, 2006
south river webdriveBuffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08...CVE-2006-08675.0 MediumFebruary 23, 2006
punbbPunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an...CVE-2006-08665.0 MediumFebruary 23, 2006
punbbPunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource...CVE-2006-0865Public exploit5.0 MediumFebruary 23, 2006
hauri virobotfilescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which...CVE-2006-086410.0 HighFebruary 23, 2006
infovista portalseInfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive...CVE-2006-08635.0 MediumFebruary 23, 2006
infovista portalseUnspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the...CVE-2006-08625.0 MediumFebruary 23, 2006
michael salzer guestboxMichael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the...CVE-2006-08615.0 MediumFebruary 23, 2006
michael salzer guestboxMultiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other...CVE-2006-08604.3 MediumFebruary 23, 2006
michael salzer guestboxMichael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an...CVE-2006-08595.0 MediumFebruary 23, 2006
starforce safe n sec personal \+ anti-spywareUnquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and...CVE-2006-08587.2 HighFebruary 23, 2006
e107 chatbox plugin, e107 +1 moreCross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote...CVE-2006-0857Public exploit4.3 MediumFebruary 23, 2006
scriptme sme gb hostSQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to...CVE-2006-08567.5 HighFebruary 23, 2006
rahul dhesi zooStack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used...CVE-2006-0855Fix available5.1 MediumFebruary 23, 2006
nullsoft winampStack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to...CVE-2006-0720Public exploitEPSS 10.5%7.6 HighFebruary 23, 2006
visnetic antivirus plug-in for mail serverThe VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly...CVE-2006-08127.2 HighFebruary 23, 2006
novell suse linux, suse linux +1 moreThe signature verification functionality in the YaST Online Update (YOU) script handling relies...CVE-2006-08035.0 MediumFebruary 23, 2006
intensive point iuser ecommercePHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows...CVE-2006-08547.5 HighFebruary 23, 2006
truenorth software ia emailserverBuffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows...CVE-2006-08536.5 MediumFebruary 23, 2006
devscripts admbookDirect static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows...CVE-2006-0852Public exploit7.5 HighFebruary 23, 2006
ilch.de ilchclanSQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote...CVE-2006-0851Public exploit7.5 HighFebruary 23, 2006
ilch.de ilchclanSQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows...CVE-2006-08507.5 HighFebruary 23, 2006
apple mac os x, mac os x server +1 moreThe "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user...CVE-2006-0848Public exploitEPSS 58.1%5.1 MediumFebruary 22, 2006
cherrypyCherryPy Directory traversal vulnerabilityCVE-2006-0847Fix available5.0 MediumFebruary 22, 2006
leif m. wright web blogMultiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote...CVE-2006-08464.3 MediumFebruary 22, 2006
leif m. wright web blogLeif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to...CVE-2006-08456.5 MediumFebruary 22, 2006
leif m. wright web blogLeif M. Wright's Blog 3.5 does not make a password comparison when authenticating an...CVE-2006-08447.5 HighFebruary 22, 2006
leif m. wright web blogLeif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with...CVE-2006-08435.0 MediumFebruary 22, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open