Skip to content
OpenAdvisories

Archive

14 July 2006

Vulnerabilities first published on this day (UTC), newest first.

← June 2006 2006 / July /14 August 2006 →
  1. 1 
  2. 2 
  3. 314
  4. 4 
  5. 54
  6. 653
  7. 729
  8. 81
  9. 9 
  10. 1027
  11. 1119
  12. 1220
  13. 1357
  14. 1436
  15. 151
  16. 16 
  17. 1718
  18. 1830
  19. 1946
  20. 209
  21. 2144
  22. 22 
  23. 23 
  24. 243
  25. 2532
  26. 261
  27. 2740
  28. 2821
  29. 292
  30. 30 
  31. 3125
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Unscored —
    CVE-2006-3625

    FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) a…

  • Unscored —
    CVE-2006-3620

    Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject…

  • Unscored —
    CVE-2006-3624 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-3622

    The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote…

  • Unscored —
    CVE-2006-3623

    Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earli…

  • Unscored —
    CVE-2006-3621 Public exploit

    SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-2450

    auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifi…

    libvncserver Debian
  • Unscored —
    CVE-2006-3616 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacke…

  • Unscored —
    CVE-2006-3612

    Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTM…

  • Unscored —
    CVE-2006-3607 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scri…

  • Unscored —
    CVE-2006-3617

    Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allow…

  • Unscored —
    CVE-2006-3608 Public exploit

    The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the…

  • Unscored —
    CVE-2006-3606

    Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dep…

  • Unscored —
    CVE-2006-3609

    Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject …

  • Unscored —
    CVE-2006-3611 Public exploit

    Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitr…

  • Unscored —
    CVE-2006-3614

    index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, po…

  • Unscored —
    CVE-2006-3618

    SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote atta…

  • Unscored —
    CVE-2006-3615

    Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote att…

  • Unscored —
    CVE-2006-3613

    Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterpri…

  • Unscored —
    CVE-2006-3610

    index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database sche…

  • Unscored —
    CVE-2006-3602 Public exploit

    Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attacker…

  • Unscored —
    CVE-2006-3604 Public exploit

    Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access …

  • Unscored —
    CVE-2006-3591 Public exploit EPSS 26%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the…

  • Unscored —
    CVE-2006-3598

    SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-3600

    Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote us…

  • Unscored —
    CVE-2006-3603 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attacke…

  • Unscored —
    CVE-2006-3596

    The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.…

  • Unscored —
    CVE-2006-3605 Public exploit EPSS 24%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition pr…

  • Unscored —
    CVE-2006-3599

    SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-3594

    Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3593

    The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overw…

  • Unscored —
    CVE-2006-3595

    The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require cr…

  • Unscored —
    CVE-2006-3592 Public exploit

    Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a…

  • Unscored —
    CVE-2006-3601

    ** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows rem…

  • Unscored —
    CVE-2006-3597

    passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator s…

  • Unscored —
    CVE-2006-3590 EPSS 14%

    mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary command…