Skip to content
OpenAdvisories

Archive

July 2006

Vulnerabilities first published in this month (UTC), newest first.

179 results · Clear filters · Feed

  • Unscored —
    CVE-2006-3944 Public exploit EPSS 17%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) …

  • Unscored —
    CVE-2006-3943 Public exploit EPSS 16%

    Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attacker…

  • Unscored —
    CVE-2006-3942 Public exploit EPSS 75%

    The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a d…

  • Unscored —
    CVE-2006-3940 Public exploit

    Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1…

  • Unscored —
    CVE-2006-3929 Public exploit

    Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router runni…

  • Unscored —
    CVE-2006-3928 Public exploit

    PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-3927 Public exploit

    Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2006-3926 Public exploit

    Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-3931 Public exploit

    Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execu…

  • Unscored —
    CVE-2006-3930 Public exploit

    PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earli…

  • Unscored —
    CVE-2006-2481 Public exploit

    VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded …

  • Unscored —
    CVE-2006-3922 Public exploit

    PHP remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attackers to exec…

  • Unscored —
    CVE-2006-3746 Public exploit

    Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial of service (segmentati…

  • Unscored —
    CVE-2006-3747 Public exploit EPSS 97%

    Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and …

  • Unscored —
    CVE-2006-3912 Public exploit

    Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact.

  • Unscored —
    CVE-2006-3915 Public exploit EPSS 22%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterati…

  • Unscored —
    CVE-2006-3918 Public exploit EPSS 95%

    http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 befor…

  • Unscored —
    CVE-2006-3917 Public exploit

    PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote a…

  • Unscored —
    CVE-2006-3910 Public exploit EPSS 17%

    Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2006-3911 Public exploit EPSS 16%

    PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-3909 Public exploit

    Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-3904 Public exploit

    SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allo…

  • Unscored —
    CVE-2006-3677 Public exploit EPSS 80%

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chan…

  • Unscored —
    CVE-2006-3897 Public exploit EPSS 23%

    Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (a…

  • Unscored —
    CVE-2006-3899 Public exploit EPSS 24%

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2006-3898 Public exploit EPSS 24%

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2006-3838 Public exploit EPSS 74%

    Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in produc…

  • Unscored —
    CVE-2006-3819 Public exploit

    Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-3883 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-3886 Public exploit

    SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-3879 Public exploit

    Integer overflow in the loadChunk function in loaders/load_gt2.c in libmikmod in Mikmod Sound System 3.2.2 allows remot…

  • Unscored —
    CVE-2006-3884 Public exploit

    Multiple SQL injection vulnerabilities in links.php in Gonafish LinksCaffe 3.0 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-3880 Public exploit EPSS 25%

    Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to ca…

  • Unscored —
    CVE-2006-3851 Public exploit

    SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-3847 Public exploit

    PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.ph…

  • Unscored —
    CVE-2006-3843 Public exploit

    PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote at…

  • Unscored —
    CVE-2006-3845 Public exploit

    Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-3850 Public exploit

    PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old_settings.php e…

  • Unscored —
    CVE-2006-3846 Public exploit

    PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote at…

  • Medium —
    CVE-2006-3835 Public exploit EPSS 48%

    Apache Tomcat Reveals Directories

    Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do.