Archive
July 2006
Vulnerabilities first published in this month (UTC), newest first.
532 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script …
-
Unscored —
TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, whi…
-
Unscored —
SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script …
-
Unscored —
Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, whi…
-
Unscored —
Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files …
-
Unscored —
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which …
-
Unscored —
FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2…
-
Unscored —
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allow…
-
Unscored —
Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (…
-
Unscored —
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote att…
-
Unscored —
Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a ma…
-
Unscored —
Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-pr…
-
Unscored —
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which a…
-
Unscored —
Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause a…
-
Unscored —CVE-2006-3422 Public exploit
PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via…
-
Unscored —
Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to …
-
Unscored —CVE-2006-3405 Public exploit
Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary…
-
Unscored —
Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes…
-
Unscored —
Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intend…
-
Unscored —
Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote …
-
Unscored —
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the r…
-
Unscored —
Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, w…
-
Unscored —
Kamikaze-QSCM 0.1 stores config.inc under the web document root with insufficient access control, which allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-3355 Public exploit
Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code v…
-
Unscored —
V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to injec…
-
Unscored —CVE-2006-3394 Public exploit
SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary …
-
Unscored —
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attac…
-
Unscored —CVE-2006-3366 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary fil…
-
Unscored —CVE-2006-3359 Public exploit
Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web …
-
Unscored —
Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allo…
-
Unscored —
index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers t…
-
Unscored —CVE-2006-3362 Public exploit
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) …
-
Unscored —CVE-2006-3358 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject a…