Skip to content
OpenAdvisories

Archive

7 June 2006

Vulnerabilities first published on this day (UTC), newest first.

← May 2006 2006 / June /7 July 2006 →
  1. 140
  2. 242
  3. 315
  4. 4 
  5. 526
  6. 654
  7. 728
  8. 86
  9. 915
  10. 10 
  11. 11 
  12. 1239
  13. 1347
  14. 148
  15. 1529
  16. 1616
  17. 171
  18. 18 
  19. 1936
  20. 202
  21. 2116
  22. 2237
  23. 2341
  24. 2420
  25. 25 
  26. 269
  27. 2746
  28. 2824
  29. 2928
  30. 3021
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2006-1173

    Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME…

    sendmail Debian
  • Unscored —
    CVE-2006-2901 Public exploit

    The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obt…

  • Unscored —
    CVE-2006-2900 EPSS 13%

    Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the ch…

  • Unscored —
    CVE-2006-2890

    Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privile…

  • Unscored —
    CVE-2006-2880

    Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote atta…

  • Unscored —
    CVE-2006-2898

    The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to …

    asterisk iaxmodem Debian
  • Unscored —
    CVE-2006-2888 Public exploit

    PHP remote file inclusion vulnerability in _wk/wk_lang.php in Wikiwig 4.1 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2006-2889 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute…

  • Unscored —
    CVE-2006-2893

    index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang paramet…

  • Unscored —
    CVE-2006-2879

    SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2006-2892 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML …

  • Unscored —
    CVE-2006-2884 Public exploit

    SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-2882

    Multiple cross-site scripting (XSS) vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote at…

  • Unscored —
    CVE-2006-2891

    Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-2886

    view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path vi…

  • Unscored —
    CVE-2006-2885

    Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attacke…

  • Unscored —
    CVE-2006-2897

    Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web scri…

  • Unscored —
    CVE-2006-2883 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-2895

    Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inje…

  • Unscored —
    CVE-2006-2896 Public exploit

    profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form fi…

  • Unscored —
    CVE-2006-2894 Public exploit

    Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before …

  • Unscored —
    CVE-2006-2881 Public exploit EPSS 18%

    Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, a…

  • Unscored —
    CVE-2006-2887 Public exploit

    Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-2899 Public exploit

    Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execu…

  • Unscored —
    CVE-2006-2875 Public exploit

    Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple p…

    ioquake3 Debian
  • Unscored —
    CVE-2006-2877 Public exploit

    PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PH…

  • Unscored —
    CVE-2006-2878 EPSS 14%

    The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbi…

    dokuwiki Debian
  • Unscored —
    CVE-2006-2876

    Cross-site scripting (XSS) vulnerability in cat.php in PHP Pro Publish 2.0 allows remote attackers to inject arbitrary …