Skip to content
OpenAdvisories

Archive

23 June 2006

Vulnerabilities first published on this day (UTC), newest first.

41 results · Feed

  • Unscored —

    The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of…

  • Unscored —
    CVE-2006-3199 Public exploit EPSS 15%

    Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL con…

  • Unscored —

    The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-map…

  • Unscored —
    CVE-2006-3200 EPSS 16%

    Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME wit…

  • Unscored —

    Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecifi…

  • Unscored —

    Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with larg…

  • Unscored —

    Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-2914 Public exploit EPSS 21%

    PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in…

  • Unscored —

    xt_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via…

  • Unscored —

    Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, …

  • Unscored —

    Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service…

  • Unscored —
    CVE-2006-3185 Public exploit

    PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-3173 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3172 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3195 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject…

  • Unscored —

    CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a ne…

  • Unscored —
    CVE-2006-3189 Public exploit

    Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attac…

  • Unscored —

    SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2006-3192 Public exploit

    PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-3177 Public exploit

    PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows rem…

  • Unscored —

    Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attac…

  • Unscored —
    CVE-2006-3186 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web…

  • Unscored —

    index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid templa…

  • Unscored —

    CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly in…

  • Unscored —
    CVE-2006-3176 Public exploit

    SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-3184 Public exploit

    Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attack…

  • Unscored —

    SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-3175 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP c…

  • Unscored —

    Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inj…

  • Unscored —

    SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to exe…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject …

  • Unscored —

    Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to rea…

  • Unscored —
    CVE-2006-3193 Public exploit EPSS 15%

    Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, a…

  • Unscored —
    CVE-2006-3191 Public exploit

    Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web scr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when register_globals is enab…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrar…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remo…