Archive
July 2006
Vulnerabilities first published in this month (UTC), newest first.
179 results · Clear filters · Feed
-
Unscored —CVE-2006-3836 Public exploit
Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO…
-
Unscored —CVE-2006-3822 Public exploit
SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to e…
-
Unscored —CVE-2006-3832 Public exploit
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execut…
-
Unscored —CVE-2006-3824 Public exploit
systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo sy…
-
Unscored —CVE-2006-3823 Public exploit
SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basi…
-
Unscored —CVE-2006-3814 Public exploit
Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earli…
-
Unscored —CVE-2006-3815 Public exploit
heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local …
-
Unscored —CVE-2006-3793 Public exploit
PHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows remote attackers to e…
-
Unscored —CVE-2006-3787 Public exploit
kpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the CreateRemoteThread API fu…
-
Unscored —CVE-2006-3776 Public exploit
PHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2) AutoHost 3.0 allows r…
-
Unscored —CVE-2006-3777 Public exploit
PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute…
-
Unscored —CVE-2006-3775 Public exploit
SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote…
-
Unscored —CVE-2006-3773 Public exploit
PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component (com_smf) For Joomla! and …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote atta…
-
Unscored —CVE-2006-3774 Public exploit
PHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs) 1.0 and earlier for Jo…
-
Unscored —
PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass sec…
-
Unscored —CVE-2006-3763 Public exploit
SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-3755 Public exploit
PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remo…
-
Unscored —CVE-2006-3750 Public exploit
PHP remote file inclusion vulnerability in server.php in the Hashcash Component (com_hashcash) 1.2.1 for Joomla! allows…
-
Unscored —CVE-2006-3749 Public exploit
PHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0.0 for Mambo 4.5.1 CMS…
-
Unscored —CVE-2006-3754 Public exploit
PHP remote file inclusion vulnerability in Include/editor/rich_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier …
-
Unscored —CVE-2006-3751 Public exploit
PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3 Addon Component (com_htm…
-
Unscored —CVE-2006-3748 Public exploit
PHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth Component for Mambo 4.0j, and …
-
Unscored —CVE-2006-3734 Public exploit
Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Re…
-
High 8.8
Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-3735 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Mail2Forum (module for phpBB) 1.2 and earlier allow remote attack…
-
Unscored —
DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a den…
-
Unscored —
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitori…
-
Unscored —CVE-2006-3736 Public exploit
PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlie…
-
Unscored —CVE-2006-3727 Public exploit
Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —
Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to…
-
Unscored —CVE-2006-3698 Public exploit
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vul…
-
Unscored —CVE-2006-3693 Public exploit
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) …
-
Unscored —CVE-2006-3696 Public exploit
filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) v…
-
Unscored —
Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote auth…
-
Unscored —CVE-2006-3683 Public exploit
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute …
-
Unscored —CVE-2006-3689 Public exploit
PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to…
-
Unscored —CVE-2006-3682 Public exploit
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) y…
-
Unscored —
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI…
-
Unscored —CVE-2006-3692 Public exploit
PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to …