Skip to content
OpenAdvisories

Archive

27 July 2006

Vulnerabilities first published on this day (UTC), newest first.

← June 2006 2006 / July /27 August 2006 →
  1. 1 
  2. 2 
  3. 314
  4. 4 
  5. 54
  6. 653
  7. 729
  8. 81
  9. 9 
  10. 1027
  11. 1119
  12. 1220
  13. 1357
  14. 1436
  15. 151
  16. 16 
  17. 1718
  18. 1830
  19. 1946
  20. 209
  21. 2144
  22. 22 
  23. 23 
  24. 243
  25. 2532
  26. 261
  27. 2740
  28. 2821
  29. 292
  30. 30 
  31. 3125
All Critical High Medium Low Exploited only Public exploit

40 results · Feed

  • Unscored —
    CVE-2006-3909 Public exploit

    Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-3904 Public exploit

    SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allo…

  • Unscored —
    CVE-2006-3905

    SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-3902

    Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-3906

    Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls,…

  • Unscored —
    CVE-2006-3903

    CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to…

  • Unscored —
    CVE-2006-3907

    Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet…

  • Unscored —
    CVE-2006-3908

    Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and …

  • Unscored —
    CVE-2006-2933

    kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, wh…

  • Unscored —
    CVE-2006-3113

    Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to c…

    thunderbird Debian
  • Unscored —
    CVE-2006-3809

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the Universa…

    thunderbird Debian
  • Unscored —
    CVE-2006-3810

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonk…

    thunderbird Debian
  • Unscored —
    CVE-2006-3811

    Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allo…

    thunderbird Debian
  • Unscored —
    CVE-2006-3805

    The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might a…

    thunderbird Debian
  • Unscored —
    CVE-2006-3802

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijac…

    thunderbird Debian
  • Unscored —
    CVE-2006-3801

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame…

    thunderbird Debian
  • Unscored —
    CVE-2006-3808

    Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code …

    thunderbird Debian
  • Unscored —
    CVE-2006-3807

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execu…

    thunderbird Debian
  • Unscored —
    CVE-2006-3677 Public exploit EPSS 80%

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chan…

  • Unscored —
    CVE-2006-3804

    Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to …

    thunderbird Debian
  • Unscored —
    CVE-2006-3803

    Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, …

    thunderbird Debian
  • Unscored —
    CVE-2006-3806

    Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and …

    thunderbird Debian
  • Unscored —
    CVE-2006-3840

    The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including …

  • Unscored —
    CVE-2006-3897 Public exploit EPSS 23%

    Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (a…

  • Unscored —
    CVE-2006-3901

    Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2006-3899 Public exploit EPSS 24%

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2006-3898 Public exploit EPSS 24%

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2006-3900

    Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2006-3633

    OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via she…

  • Unscored —
    CVE-2006-3838 Public exploit EPSS 74%

    Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in produc…

  • Unscored —
    CVE-2006-3819 Public exploit

    Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-3883 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-3881

    Cross-site scripting (XSS) vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-3886 Public exploit

    SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-3879 Public exploit

    Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remot…

  • Unscored —
    CVE-2006-3884 Public exploit

    Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-3882

    Shalwan MusicBox 2.3.4 and earlier allows remote attackers to obtain configuration information via a direct request to …

  • Unscored —
    CVE-2006-3880 Public exploit EPSS 25%

    Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to ca…

  • Unscored —
    CVE-2006-3878

    Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local us…

  • Unscored —
    CVE-2006-3885

    Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary…