Archive
7 July 2006
Vulnerabilities first published on this day (UTC), newest first.
29 results · Feed
-
Low —
Zope allows local users to read arbitrary files
Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.
-
Unscored —
Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute ar…
-
Unscored —CVE-2006-2451 Public exploit
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a …
-
Unscored —
Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows re…
-
Unscored —CVE-2006-3421 Public exploit
PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remot…
-
Unscored —
Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote at…
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script …
-
Unscored —
TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, whi…
-
Unscored —
SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script …
-
Unscored —
Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, whi…
-
Unscored —
Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files …
-
Unscored —
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which …
-
Unscored —
FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2…
-
Unscored —
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allow…
-
Unscored —
Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (…
-
Unscored —
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote att…
-
Unscored —
Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a ma…
-
Unscored —
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-pr…
-
Unscored —
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which a…
-
Unscored —
Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause a…
-
Unscored —CVE-2006-3422 Public exploit
PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via…
-
Unscored —
Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to …
-
Unscored —CVE-2006-3405 Public exploit
Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary…
-
Unscored —
Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes…
-
Unscored —
Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intend…
-
Unscored —
Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote …