Archive
July 2006
Vulnerabilities first published in this month (UTC), newest first.
179 results · Clear filters · Feed
-
Unscored —
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system pan…
-
Unscored —CVE-2006-3680 Public exploit
Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-3685 Public exploit
PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2006-3690 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-3670 Public exploit
Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a req…
-
Unscored —CVE-2006-3672 Public exploit
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the…
-
Unscored —
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and ea…
-
Unscored —CVE-2006-3662 Public exploit
SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consum…
-
Unscored —
Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary c…
-
Unscored —
Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to p…
-
Unscored —
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a …
-
Unscored —CVE-2006-3624 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-3621 Public exploit
SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-3616 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacke…
-
Unscored —CVE-2006-3607 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scri…
-
Unscored —CVE-2006-3608 Public exploit
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the…
-
Unscored —CVE-2006-3611 Public exploit
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitr…
-
Unscored —CVE-2006-3602 Public exploit
Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attacker…
-
Unscored —CVE-2006-3604 Public exploit
Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access …
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the…
-
Unscored —CVE-2006-3603 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attacke…
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition pr…
-
Unscored —CVE-2006-3592 Public exploit
Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a…
-
Unscored —
Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execu…
-
Unscored —CVE-2006-3580 Public exploit
SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-3577 Public exploit
SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2006-3568 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier…
-
Unscored —CVE-2006-3562 Public exploit
PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a…
-
Unscored —CVE-2006-3571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attack…
-
Unscored —CVE-2006-3563 Public exploit
Cross-site scripting (XSS) vulnerability in gallery/thumb.php in Winged Gallery 1.0 allows remote attackers to inject a…
-
Unscored —CVE-2006-3561 Public exploit
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers…
-
Unscored —CVE-2006-3572 Public exploit
SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-3560 Public exploit
SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-3543 Public exploit
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbi…
-
Unscored —CVE-2006-3556 Public exploit
PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers t…
-
Unscored —CVE-2006-3546 Public exploit
Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via…
-
Unscored —CVE-2003-1304 Public exploit
EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, w…
-
Unscored —CVE-2006-3532 Public exploit
PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enabl…
-
Unscored —CVE-2006-3531 Public exploit
includes/editor/insert_image.php in Pivot 1.30 RC2 and earlier creates the authentication credentials from parameters, …