cve.nowby Sazabi

CVEs published February 2, 2006

28 CVEs were published on February 2, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 28
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 28
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 28

CVE-2006-0299The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes…UnratedFeb 2, 2006
CVE-2006-0297Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow…UnratedFeb 2, 2006
CVE-2006-0298The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and…UnratedFeb 2, 2006
CVE-2006-0292The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote…UnratedFeb 2, 2006
CVE-2006-0293The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption)…UnratedFeb 2, 2006
CVE-2006-0294Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute…UnratedFeb 2, 2006
CVE-2006-0295Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute…UnratedFeb 2, 2006
CVE-2006-0296The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which…UnratedFeb 2, 2006
CVE-2006-0529Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products…UnratedFeb 2, 2006
CVE-2006-0530Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products…UnratedFeb 2, 2006
CVE-2003-1292PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files…UnratedFeb 2, 2006
CVE-2005-4708Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service…UnratedFeb 2, 2006
CVE-2005-4709The popSubjectContext method in the SecurityAssociation class in JBoss Enterprise Java Beans (EJB) 3.0 RC3 maintains the threadPrincipal…UnratedFeb 2, 2006
CVE-2006-0433Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is…UnratedFeb 2, 2006
CVE-2006-0512PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on…UnratedFeb 2, 2006
CVE-2006-0516Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause…UnratedFeb 2, 2006
CVE-2006-0517Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and…UnratedFeb 2, 2006
CVE-2006-0518Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote…UnratedFeb 2, 2006
CVE-2006-0519SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request…UnratedFeb 2, 2006
CVE-2006-0520SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute…UnratedFeb 2, 2006
CVE-2006-0521Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via…UnratedFeb 2, 2006
CVE-2006-0522SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier…UnratedFeb 2, 2006
CVE-2006-0523SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the…UnratedFeb 2, 2006
CVE-2006-0524Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web…UnratedFeb 2, 2006
CVE-2006-0525Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and…UnratedFeb 2, 2006

Show all 28 entriesShow fewer entries