Skip to content
OpenAdvisories

Archive

July 2006

Vulnerabilities first published in this month (UTC), newest first.

179 results · Clear filters · Feed

  • Unscored —
    CVE-2006-3533 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.30 RC2 and earlier, when register_globals is enabled, al…

  • Unscored —
    CVE-2006-3530 Public exploit

    PHP remote file inclusion vulnerability in com_pccookbook/pccookbook.php in the PccookBook Component for Mambo and Joom…

  • Unscored —
    CVE-2006-3520 Public exploit

    PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when register_globals i…

  • Unscored —
    CVE-2006-3524 Public exploit EPSS 68%

    Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2006-3528 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers…

  • Unscored —
    CVE-2006-3513 Public exploit EPSS 23%

    danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by …

  • Unscored —
    CVE-2006-3518 Public exploit

    SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3517 Public exploit

    PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote a…

  • Unscored —
    CVE-2006-0026 Public exploit EPSS 89%

    Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote att…

  • Unscored —
    CVE-2006-3510 Public exploit EPSS 15%

    The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attacke…

  • Unscored —
    CVE-2006-3511 Public exploit EPSS 22%

    Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts…

  • Unscored —
    CVE-2006-3512 Public exploit EPSS 24%

    Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled p…

  • Unscored —
    CVE-2006-1314 Public exploit EPSS 61%

    Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server…

  • Unscored —
    CVE-2006-1315 Public exploit EPSS 49%

    The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other pro…

  • Unscored —
    CVE-2006-2372 Public exploit EPSS 90%

    Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up t…

  • Unscored —
    CVE-2006-2389 Public exploit EPSS 39%

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, all…

  • Unscored —
    CVE-2006-3493 Public exploit EPSS 40%

    Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly othe…

  • Unscored —
    CVE-2006-3491 Public exploit

    Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2006-3475 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-3478 Public exploit

    PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register…

  • Unscored —
    CVE-2006-3484 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-3474 Public exploit

    Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-3476 Public exploit

    Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows…

  • Unscored —
    CVE-2006-3472 Public exploit EPSS 11%

    Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with …

  • Unscored —
    CVE-2006-3471 Public exploit EPSS 21%

    Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table wi…

  • Unscored —
    CVE-2006-3431 Public exploit EPSS 28%

    Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute ar…

  • Unscored —
    CVE-2006-2451 Public exploit

    The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a …

  • Unscored —
    CVE-2006-3421 Public exploit

    PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remot…

  • Unscored —
    CVE-2006-3427 Public exploit EPSS 24%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL a…

  • Unscored —
    CVE-2006-3422 Public exploit

    PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-3405 Public exploit

    Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2006-3355 Public exploit

    Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2006-3394 Public exploit

    SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-3366 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2006-3359 Public exploit

    Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-3362 Public exploit

    Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) …

  • Unscored —
    CVE-2006-3358 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject a…

  • Unscored —
    CVE-2006-3387 Public exploit

    Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remo…

  • Unscored —
    CVE-2006-3361 Public exploit

    PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote…

  • Unscored —
    CVE-2006-3392 Public exploit Scanner template EPSS 79%

    Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote…