Skip to content
OpenAdvisories

Archive

18 July 2006

Vulnerabilities first published on this day (UTC), newest first.

30 results · Feed

  • Unscored —

    Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mai…

  • Unscored —

    Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execu…

  • Unscored —
    CVE-2006-3469 Public exploit EPSS 31%

    Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote auth…

  • Unscored —

    Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mai…

  • Unscored —

    Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a d…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote a…

  • Unscored —

    Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors vi…

  • Unscored —

    Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL comma…

  • Unscored —

    Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a d…

  • Unscored —

    SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-3683 Public exploit

    PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute …

  • Unscored —

    Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to …

  • Unscored —

    Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attac…

  • Unscored —

    Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to…

  • Unscored —

    FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges…

  • Unscored —
    CVE-2006-3689 Public exploit

    PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to…

  • Unscored —
    CVE-2006-3682 Public exploit

    awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) y…

  • Unscored —
    CVE-2006-3687 Public exploit EPSS 19%

    Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI…

  • Unscored —
    CVE-2006-3692 Public exploit

    PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to …

  • Unscored —

    Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and p…

  • Unscored —

    PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers t…

  • Unscored —
    CVE-2006-3468 Public exploit EPSS 16%

    Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system pan…

  • Unscored —
    CVE-2006-3680 Public exploit

    Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-3685 Public exploit

    PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-3690 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute a…

  • Unscored —

    nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (applicati…

  • Unscored —
    CVE-2006-3670 Public exploit

    Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a req…

  • Unscored —
    CVE-2006-3672 Public exploit

    KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the…

  • Unscored —

    nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consu…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.…