Archive
July 2006
Vulnerabilities first published in this month (UTC), newest first.
532 results · Feed
-
Unscored —
Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier all…
-
Unscored —
WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as …
-
Unscored —CVE-2006-3387 Public exploit
Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remo…
-
Unscored —CVE-2006-3361 Public exploit
PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote…
-
Unscored —
Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earli…
-
Unscored —
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote…
-
Unscored —CVE-2006-3395 Public exploit
PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary P…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2006-3372 Public exploit
Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttrib…
-
Unscored —
Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of servic…
-
Unscored —
The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files…
-
Unscored —CVE-2006-3357 EPSS 35%
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote a…
-
Unscored —CVE-2006-3375 Public exploit
PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute…
-
Unscored —CVE-2006-3381 Public exploit
SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then d…
-
Unscored —CVE-2006-3401 Public exploit
Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to caus…
-
Unscored —CVE-2006-3364 Public exploit
SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execu…
-
Unscored —CVE-2006-3374 Public exploit
PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attack…
-
Unscored —CVE-2006-3400 Public exploit
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP)…
-
Unscored —
SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-3385 Public exploit
Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject a…
-
Unscored —
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetyp…
-
Unscored —
Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, which allows remo…
-
Unscored —
The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cau…
-
Unscored —
index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installatio…
-
Unscored —CVE-2006-3402 Public exploit
SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the passwo…
-
Unscored —CVE-2006-3396 Public exploit
PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows …
-
Unscored —
The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remo…
-
Unscored —CVE-2006-3363 Public exploit
PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to e…
-
Unscored —
Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domai…
-
Unscored —
Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a den…
-
Unscored —CVE-2006-3353 Public exploit
Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bou…
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter proper…
-
Medium —
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error mess…
-
Unscored —
TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filena…
-
Unscored —
Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute …
-
Unscored —
The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions,…
-
Unscored —
The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, whic…
-
Unscored —
Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute …
-
Unscored —
Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbit…