Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
646 results · Feed
-
Unscored —
Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Serve…
-
Unscored —
Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) …
-
Unscored —
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to g…
-
Unscored —CVE-2006-3227 EPSS 14%
Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allo…
-
Unscored —
Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause …
-
Unscored —
Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attacke…
-
Unscored —CVE-2006-2310 Public exploit
BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a…
-
Unscored —
SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to e…
-
Unscored —
SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbit…
-
Unscored —
SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbi…
-
Unscored —
The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass ant…
-
Unscored —CVE-2006-3221 Public exploit
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-3213 Public exploit
SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id …
-
Unscored —
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to byp…
-
Unscored —
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cau…
-
Unscored —
The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and passw…
-
Unscored —
Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated ad…
-
Unscored —
register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the…
-
Unscored —
Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers…
-
Unscored —
Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject w…
-
Unscored —
JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information,…
-
Unscored —
Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject J…
-
Unscored —
The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows…
-
Unscored —
Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers …
-
Unscored —
Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user_env, pass_env, powe…
-
Unscored —
The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of…
-
Unscored —
Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL con…
-
Unscored —
The ip6_savecontrol function in NetBSD 2.0 through 3.0, under certain configurations, does not check to see if IPv4-map…
-
Unscored —CVE-2006-3200 EPSS 16%
Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME wit…
-
Unscored —
Unspecified vulnerability in the kernel in HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecifi…
-
Unscored —
Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with larg…
-
Unscored —
Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —
PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in…
-
Unscored —
xt_sctp in netfilter for Linux kernel before 2.6.17.1 allows attackers to cause a denial of service (infinite loop) via…
-
Unscored —
Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, …
-
Unscored —
Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service…
-
Unscored —CVE-2006-3185 Public exploit
PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbi…