Skip to content
OpenAdvisories

Archive

31 July 2006

Vulnerabilities first published on this day (UTC), newest first.

← June 2006 2006 / July /31 August 2006 →
  1. 1 
  2. 2 
  3. 314
  4. 4 
  5. 54
  6. 653
  7. 729
  8. 81
  9. 9 
  10. 1027
  11. 1119
  12. 1220
  13. 1357
  14. 1436
  15. 151
  16. 16 
  17. 1718
  18. 1830
  19. 1946
  20. 209
  21. 2144
  22. 22 
  23. 23 
  24. 243
  25. 2532
  26. 261
  27. 2740
  28. 2821
  29. 292
  30. 30 
  31. 3125
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2006-3944 Public exploit EPSS 17%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) …

  • Unscored —
    CVE-2006-3945

    The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by sett…

  • Unscored —
    CVE-2006-3946

    WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) a…

  • Unscored —
    CVE-2006-3943 Public exploit EPSS 16%

    Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attacker…

  • Unscored —
    CVE-2006-3941

    Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause …

  • Unscored —
    CVE-2006-3942 Public exploit EPSS 75%

    The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a d…

  • Unscored —
    CVE-2006-3938

    DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.p…

  • Unscored —
    CVE-2006-3939

    ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in…

  • Unscored —
    CVE-2006-3940 Public exploit

    Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1…

  • Unscored —
    CVE-2006-3937

    post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (…

  • Medium —
    CVE-2006-3935

    Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp

    system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/a…

    org.opencms:opencms-core Maven
  • Medium —
    CVE-2006-3936

    Alkacon OpenCms Exposes JSP Source Code

    system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.

    org.opencms:opencms-core Maven
  • Low —
    CVE-2006-3933

    Alkacon OpenCms XSS via unsanitized message body

    Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.

    org.opencms:opencms-core Maven
  • Medium —
    CVE-2006-3934

    Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter

    Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter.

    org.opencms:opencms-core Maven
  • Unscored —
    CVE-2006-3932

    SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-3929 Public exploit

    Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router runni…

  • Unscored —
    CVE-2006-3928 Public exploit

    PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-3927 Public exploit

    Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-3926 Public exploit

    Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-3931 Public exploit

    Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execu…

  • Unscored —
    CVE-2006-3120

    Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2006-3930 Public exploit

    PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earli…

  • Unscored —
    CVE-2006-2481 Public exploit

    VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded …

  • Unscored —
    CVE-2005-3618

    Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 pa…

  • Unscored —
    CVE-2005-3620

    The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2…