Skip to content
OpenAdvisories

Archive

July 2006

Vulnerabilities first published in this month (UTC), newest first.

← June 2006 2006 / July August 2006 →
  1. 1 
  2. 2 
  3. 314
  4. 4 
  5. 54
  6. 653
  7. 729
  8. 81
  9. 9 
  10. 1027
  11. 1119
  12. 1220
  13. 1357
  14. 1436
  15. 151
  16. 16 
  17. 1718
  18. 1830
  19. 1946
  20. 209
  21. 2144
  22. 22 
  23. 23 
  24. 243
  25. 2532
  26. 261
  27. 2740
  28. 2821
  29. 292
  30. 30 
  31. 3125
All Critical High Medium Low Exploited only Public exploit

532 results · Feed

  • Unscored —
    CVE-2006-3944 Public exploit EPSS 17%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) …

  • Unscored —
    CVE-2006-3945

    The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by sett…

  • Unscored —
    CVE-2006-3946

    WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) a…

  • Unscored —
    CVE-2006-3943 Public exploit EPSS 16%

    Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attacker…

  • Unscored —
    CVE-2006-3941

    Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause …

  • Unscored —
    CVE-2006-3942 Public exploit EPSS 75%

    The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a d…

  • Unscored —
    CVE-2006-3938

    DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.p…

  • Unscored —
    CVE-2006-3939

    ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in…

  • Unscored —
    CVE-2006-3940 Public exploit

    Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1…

  • Unscored —
    CVE-2006-3937

    post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (…

  • Medium —
    CVE-2006-3935

    Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp

    system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/a…

    org.opencms:opencms-core Maven
  • Medium —
    CVE-2006-3936

    Alkacon OpenCms Exposes JSP Source Code

    system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.

    org.opencms:opencms-core Maven
  • Low —
    CVE-2006-3933

    Alkacon OpenCms XSS via unsanitized message body

    Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.

    org.opencms:opencms-core Maven
  • Medium —
    CVE-2006-3934

    Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter

    Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2006-3932

    SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-3929 Public exploit

    Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router runni…

  • Unscored —
    CVE-2006-3928 Public exploit

    PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-3927 Public exploit

    Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-3926 Public exploit

    Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-3931 Public exploit

    Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execu…

  • Unscored —
    CVE-2006-3120

    Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2006-3930 Public exploit

    PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earli…

  • Unscored —
    CVE-2006-2481 Public exploit

    VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded …

  • Unscored —
    CVE-2005-3618

    Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 pa…

  • Unscored —
    CVE-2005-3620

    The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2…

  • Unscored —
    CVE-2006-1178

    Tamarack MMSd before 7.992 allows remote attackers to cause a denial of service (crash) via malformed RFC1006 (OSI over…

  • Unscored —
    CVE-2006-3812

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to refer…

    thunderbird Debian
  • Unscored —
    CVE-2006-3922 Public exploit

    PHP remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attackers to exec…

  • Unscored —
    CVE-2006-3924

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-3921

    Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated…

  • Unscored —
    CVE-2006-3768

    Integer underflow in filecpnt.exe in FileCOPA FTP Server 1.01 before 2006-07-21 allow remote authenticated users to exe…

  • Unscored —
    CVE-2006-3925

    Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6…

  • Unscored —
    CVE-2006-3923

    Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is ena…

  • Unscored —
    CVE-2006-3675

    Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the password database whe…

  • Unscored —
    CVE-2006-3920

    The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service…

  • Unscored —
    CVE-2006-3746 Public exploit

    Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentati…

    gnupg2 Debian
  • Unscored —
    CVE-2006-3747 Public exploit EPSS 97%

    Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and …

    apache2 Debian
  • Unscored —
    CVE-2006-3913

    Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a…

    freeciv Debian
  • Unscored —
    CVE-2006-3914

    Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inj…

  • Unscored —
    CVE-2006-3912 Public exploit

    Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.