2006

convert-fcrontab in Fcron 2.9.5 and 3.0.0 allows remote attackers to create or overwrite arbitrary files via ".." sequen

IBM Lotus Domino Server 7.0 allows remote attackers to cause a denial of service (segmentation fault) via a crafted pack

jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (app

MyTopix 1.2.3 allows remote attackers to obtain the installation path via a direct request to logon.mod.php, which leaks

MyTopix 1.2.3 allows remote attackers to obtain the installation path via an invalid hl parameter to index.php, which le

RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messa

CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "sp

The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether

elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite redirection) via a request with

LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attac

Multiple directory traversal vulnerabilities in PHP iCalendar 2.0.1, 2.1, and 2.2 allow remote attackers to include arbi

Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers

Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows

Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wirele

Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to o

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of s

dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (C

Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous regi

process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows r

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remo

Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary

imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which return

readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.

admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (d

PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP

The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, whi

mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, whic

Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequ

Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attac

IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request,

The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when runni

Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (app

eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a negat

Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service (hang

eStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE request with a Content-L

Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would

dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid

dotProject 2.0.1 and earlier leaves (1) phpinfo.php and (2) check.php accessible under the /docs/ directory after instal

Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libap

CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors

Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send req

Directory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to read certain fil

D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service c

Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration setti

Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets

frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in

help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters.

Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitra

Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of servi

Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCe