Skip to content
OpenAdvisories

Archive

6 July 2006

Vulnerabilities first published on this day (UTC), newest first.

53 results · Feed

  • Unscored —

    Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetyp…

  • Unscored —

    Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, which allows remo…

  • Unscored —

    The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cau…

  • Unscored —

    index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installatio…

  • Unscored —
    CVE-2006-3402 Public exploit

    SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the passwo…

  • Unscored —
    CVE-2006-3396 Public exploit

    PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows …

  • Unscored —

    The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remo…

  • Unscored —
    CVE-2006-3363 Public exploit

    PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to e…

  • Unscored —

    Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domai…

  • Unscored —

    Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a den…

  • Unscored —
    CVE-2006-3353 Public exploit

    Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bou…

  • Unscored —
    CVE-2006-3354 Public exploit EPSS 17%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter proper…

  • Medium —

    phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence

    Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error mess…