Skip to content
OpenAdvisories

Archive

10 July 2006

Vulnerabilities first published on this day (UTC), newest first.

27 results · Feed

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML…

  • Unscored —

    Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read …

  • Unscored —
    CVE-2006-3493 Public exploit EPSS 40%

    Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly othe…

  • Unscored —

    F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for…

  • Unscored —

    VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attacke…

  • Unscored —

    F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for…

  • Unscored —

    The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote …

  • Unscored —
    CVE-2006-3491 Public exploit

    Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a…

  • Unscored —

    Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Inst…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows remote attackers to in…

  • Unscored —

    PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allo…

  • Unscored —
    CVE-2006-3475 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP c…

  • Unscored —

    Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to ca…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary…

  • Unscored —

    Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2006-3478 Public exploit

    PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.…

  • Unscored —
    CVE-2006-3484 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary w…

  • Unscored —

    Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL command…

  • Unscored —

    CRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers…

  • Unscored —
    CVE-2006-3474 Public exploit

    Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-3476 Public exploit

    Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows…

  • Unscored —
    CVE-2006-3472 Public exploit EPSS 11%

    Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with …

  • Unscored —
    CVE-2006-3471 Public exploit EPSS 21%

    Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table wi…

  • Unscored —

    The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers t…

  • Unscored —

    Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions …

  • Unscored —

    The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows loc…