Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
646 results · Feed
-
Unscored —CVE-2006-2962 Public exploit
PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 2002092…
-
Unscored —
Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access Control Lists are enabled, …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager (aka Xtreme Downloads) 1.0 allow …
-
Unscored —
Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to obtain sensitive information via a direct …
-
Unscored —
Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows remote attackers to inject…
-
Unscored —CVE-2006-2946 Public exploit
Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attacke…
-
Unscored —CVE-2006-2971 Public exploit
Integer overflow in the recv_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (dae…
-
Unscored —
Syworks SafeNET allows local users to bypass restrictions on network resource consumption by editing the policy.dat fil…
-
Unscored —
SQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —
videoPage.php in L0j1k tinyMuw 0.1.0 allows remote attackers to obtain sensitive information via a certain id parameter…
-
Unscored —CVE-2006-2947 Public exploit
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.ph…
-
Unscored —
Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, whi…
-
Unscored —
Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read …
-
Unscored —
A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitra…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inj…
-
Unscored —
SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in PHP Labware LabWiki 1.0 allows remote attackers to inject arb…
-
Unscored —
Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2006-2929 Public exploit
PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and ear…
-
Unscored —CVE-2006-2928 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, al…
-
Unscored —
Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Pr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or H…
-
Unscored —
Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denia…
-
Unscored —CVE-2006-2922 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PH…
-
Unscored —
Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabl…
-
Unscored —
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Conf…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remo…
-
Unscored —
The iax_net_read function in the iaxclient open source library, as used in multiple products including (a) LoudHush 1.3…
-
Unscored —
PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when regis…
-
Unscored —
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and …
-
Unscored —CVE-2006-2919 EPSS 23%
Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or C…
-
Unscored —
Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause…
-
Unscored —
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2…
-
Unscored —
SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitra…
-
Unscored —
Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) page_footer.php…