Skip to content
OpenAdvisories

Archive

June 2006

Vulnerabilities first published in this month (UTC), newest first.

← May 2006 2006 / June July 2006 →
  1. 140
  2. 242
  3. 315
  4. 4 
  5. 526
  6. 654
  7. 728
  8. 86
  9. 915
  10. 10 
  11. 11 
  12. 1239
  13. 1347
  14. 148
  15. 1529
  16. 1616
  17. 171
  18. 18 
  19. 1936
  20. 202
  21. 2116
  22. 2237
  23. 2341
  24. 2420
  25. 25 
  26. 269
  27. 2746
  28. 2824
  29. 2928
  30. 3021
All Critical High Medium Low Exploited only Public exploit

646 results · Feed

  • Critical 9.8
    CVE-2006-3136

    Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-3157

    Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote att…

  • Unscored —
    CVE-2006-3167

    Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified …

  • Unscored —
    CVE-2006-3142 Public exploit

    SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-3159

    pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions…

  • Unscored —
    CVE-2006-3154

    SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3143 Public exploit

    Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent appl…

  • Unscored —
    CVE-2006-3138

    Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inje…

  • Unscored —
    CVE-2006-3158 Public exploit

    index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows rem…

  • Unscored —
    CVE-2006-3153

    Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inje…

  • Unscored —
    CVE-2006-3149

    Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2006-3146

    The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a de…

  • Unscored —
    CVE-2006-3164

    SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-3160

    Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remot…

  • Unscored —
    CVE-2006-3166

    Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-3165

    SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-3140

    SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-3161 Public exploit

    SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-3155

    Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to injec…

  • Unscored —
    CVE-2006-3152

    Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-3144 Public exploit

    PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.…

  • Unscored —
    CVE-2006-3132

    Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-3131

    Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2006-3129

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers …

  • Unscored —
    CVE-2006-3130

    SQL injection vulnerability in index.php in Clubpage allows remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2006-3014 Public exploit EPSS 30%

    Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites vi…

  • Unscored —
    CVE-2006-3127

    Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Ja…

  • Unscored —
    CVE-2006-3128

    choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple ext…

  • Unscored —
    CVE-2006-2911

    SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to exec…

  • Unscored —
    CVE-2006-2931

    CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute …

  • Unscored —
    CVE-2006-3106

    Cross-site scripting (XSS) vulnerability in index.php in phpMyDesktop|Arcade 1.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-3101 Public exploit EPSS 24%

    Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to …

  • Unscored —
    CVE-2006-3111

    Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-3112

    Chipmailer 1.09 allows remote attackers to obtain sensitive information via a direct request to php.php, which displays…

  • Unscored —
    CVE-2006-3109 Public exploit EPSS 14%

    Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.…

  • Unscored —
    CVE-2006-3103 Public exploit

    Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2006-3107

    Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow…

  • Unscored —
    CVE-2006-3108

    Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2006-3102 Public exploit

    Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remo…

  • Unscored —
    CVE-2006-3105 Public exploit

    CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via…