cve.nowby Sazabi

CVEs published February 28, 2006

35 CVEs were published on February 28, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 35
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 35
Now in CISA KEV: 0
Fix available: 1

Most affected products

pear/archive_tar: 1

Medium, low and unrated 35

CVE-2006-0909Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP…UnratedFeb 28, 2006
CVE-2006-0910Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple…UnratedFeb 28, 2006
CVE-2006-0911NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted…UnratedFeb 28, 2006
CVE-2006-0912Oreka before 0.5 allows remote attackers to cause a denial of service (application crash) via a "certain RTP sequence."UnratedFeb 28, 2006
CVE-2006-0913SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with…UnratedFeb 28, 2006
CVE-2006-0914Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in…UnratedFeb 28, 2006
CVE-2006-0915Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in…UnratedFeb 28, 2006
CVE-2006-0916Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could…UnratedFeb 28, 2006
CVE-2006-0917Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a…UnratedFeb 28, 2006
CVE-2006-0918Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field.UnratedFeb 28, 2006
CVE-2006-0919SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remote attackers to…UnratedFeb 28, 2006
CVE-2006-0920Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local…UnratedFeb 28, 2006
CVE-2006-0921Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote…UnratedFeb 28, 2006
CVE-2006-0922CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include…UnratedFeb 28, 2006
CVE-2006-0923Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject arbitrary web…UnratedFeb 28, 2006
CVE-2006-0924Cross-site scripting (XSS) vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the…UnratedFeb 28, 2006
CVE-2006-0925Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of…UnratedFeb 28, 2006
CVE-2006-0926Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21…UnratedFeb 28, 2006
CVE-2006-0927Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x…UnratedFeb 28, 2006
CVE-2006-0928The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the _DUMP command, which…UnratedFeb 28, 2006
CVE-2006-0929Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create…UnratedFeb 28, 2006
CVE-2006-0930Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via…UnratedFeb 28, 2006
CVE-2006-0931Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and…pear/archive_tarUnratedFix availableFeb 28, 2006
CVE-2006-0932Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary…UnratedFeb 28, 2006
CVE-2006-0933Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML via a javascript URI…UnratedFeb 28, 2006

Show all 35 entriesShow fewer entries