Skip to content
OpenAdvisories

Archive

July 2006

Vulnerabilities first published in this month (UTC), newest first.

← June 2006 2006 / July August 2006 →
  1. 1 
  2. 2 
  3. 314
  4. 4 
  5. 54
  6. 653
  7. 729
  8. 81
  9. 9 
  10. 1027
  11. 1119
  12. 1220
  13. 1357
  14. 1436
  15. 151
  16. 16 
  17. 1718
  18. 1830
  19. 1946
  20. 209
  21. 2144
  22. 22 
  23. 23 
  24. 243
  25. 2532
  26. 261
  27. 2740
  28. 2821
  29. 292
  30. 30 
  31. 3125
All Critical High Medium Low Exploited only Public exploit

532 results · Feed

  • Unscored —
    CVE-2006-1315 Public exploit EPSS 49%

    The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other pro…

  • Unscored —
    CVE-2006-1300 EPSS 37%

    Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows …

  • Unscored —
    CVE-2006-2372 Public exploit EPSS 90%

    Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up t…

  • Unscored —
    CVE-2006-2389 Public exploit EPSS 39%

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, all…

  • Unscored —
    CVE-2006-3494

    Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML…

  • Unscored —
    CVE-2006-3488

    Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read …

  • Unscored —
    CVE-2006-3493 Public exploit EPSS 40%

    Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly othe…

  • Unscored —
    CVE-2006-3490

    F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for…

  • Unscored —
    CVE-2006-3487

    VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attacke…

  • Unscored —
    CVE-2006-3489

    F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for…

  • Unscored —
    CVE-2006-3492

    The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote …

  • Unscored —
    CVE-2006-3491 Public exploit

    Stack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2006-3486

    Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Inst…

  • Unscored —
    CVE-2006-3482

    Cross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2006-3483

    PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allo…

  • Unscored —
    CVE-2006-3475 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-3477

    Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to ca…

  • Unscored —
    CVE-2006-3480

    Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2006-3485

    Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execu…

  • Unscored —
    CVE-2006-3478 Public exploit

    PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register…

  • Unscored —
    CVE-2006-3479

    Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.…

  • Unscored —
    CVE-2006-3484 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-3481

    Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-3473

    CRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers…

  • Unscored —
    CVE-2006-3474 Public exploit

    Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-3476 Public exploit

    Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows…

  • Unscored —
    CVE-2006-3472 Public exploit EPSS 11%

    Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with …

  • Unscored —
    CVE-2006-3471 Public exploit EPSS 21%

    Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table wi…

  • Unscored —
    CVE-2006-3470

    The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers t…

  • Unscored —
    CVE-2006-2917

    Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions …

  • Unscored —
    CVE-2006-2936

    The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows loc…

  • Unscored —
    CVE-2006-1176

    Buffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol.dll before 1.0.3.48, as …

  • Low —
    CVE-2006-3458

    Zope allows local users to read arbitrary files

    Zope 2.7.0 to 2.7.8, 2.8.0 to 2.8.7, and 2.9.0 to 2.9.3 (Zope2) does not disable the "raw" command when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows local users to read arbitrary files.

    zope2 PyPI
  • Unscored —
    CVE-2006-3431 Public exploit EPSS 28%

    Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute ar…

  • Unscored —
    CVE-2006-2451 Public exploit

    The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a …

  • Unscored —
    CVE-2006-3410

    Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows re…

    tor Debian
  • Unscored —
    CVE-2006-3421 Public exploit

    PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remot…

  • Unscored —
    CVE-2006-3417

    Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers…

    tor Debian
  • Unscored —
    CVE-2006-3420

    Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote at…

  • Unscored —
    CVE-2006-3427 Public exploit EPSS 24%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL a…