Skip to content
OpenAdvisories

Archive

13 July 2006

Vulnerabilities first published on this day (UTC), newest first.

57 results · Feed

  • Unscored —

    Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a craft…

  • Unscored —

    Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code…

  • Unscored —

    Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a craft…

  • Unscored —
    CVE-2006-1304 EPSS 11%

    Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xl…

  • Unscored —

    Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a craft…

  • Unscored —
    CVE-2006-1302 EPSS 14%

    Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xl…

  • Unscored —

    Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of serv…

  • Unscored —

    Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers …

  • Unscored —

    Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary comm…

  • Unscored —
    CVE-2006-2388 EPSS 11%

    Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell co…

  • Unscored —
    CVE-2006-3581 Public exploit EPSS 13%

    Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execu…

  • Unscored —

    Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execut…

  • Unscored —

    Buffer overflow in Adobe Acrobat 6.0 to 6.0.4 allows remote attackers to execute arbitrary code via unknown vectors in …

  • Unscored —

    Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to caus…

  • Unscored —

    Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote atta…

  • Unscored —
    CVE-2006-3580 Public exploit

    SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitra…

  • Unscored —

    SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrar…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-2…

  • Unscored —
    CVE-2006-3577 Public exploit

    SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Format string vulnerability in the WriteText function in agl_text.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remo…

  • Unscored —

    Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as use…

  • Unscored —
    CVE-2006-3568 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier…

  • Unscored —

    SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitr…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitr…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8,…

  • Unscored —

    search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain mani…

  • Unscored —
    CVE-2006-3562 Public exploit

    PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a…

  • Unscored —
    CVE-2006-3571 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attack…

  • Unscored —
    CVE-2006-3563 Public exploit

    Cross-site scripting (XSS) vulnerability in gallery/thumb.php in Winged Gallery 1.0 allows remote attackers to inject a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redli…

  • Unscored —
    CVE-2006-3561 Public exploit

    BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers…

  • Unscored —
    CVE-2006-3572 Public exploit

    SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-3560 Public exploit

    SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary…

  • Medium 5.5

    EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a…

  • Unscored —

    Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not pr…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject ar…

  • Unscored —

    services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in DKScript.com Dragon's Kingdom Script 1.0 allow remote attackers …

  • Unscored —

    NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall …