Skip to content
OpenAdvisories

Archive

July 2006

Vulnerabilities first published in this month (UTC), newest first.

← June 2006 2006 / July August 2006 →
  1. 1 
  2. 2 
  3. 314
  4. 4 
  5. 54
  6. 653
  7. 729
  8. 81
  9. 9 
  10. 1027
  11. 1119
  12. 1220
  13. 1357
  14. 1436
  15. 151
  16. 16 
  17. 1718
  18. 1830
  19. 1946
  20. 209
  21. 2144
  22. 22 
  23. 23 
  24. 243
  25. 2532
  26. 261
  27. 2740
  28. 2821
  29. 292
  30. 30 
  31. 3125
All Critical High Medium Low Exploited only Public exploit

532 results · Feed

  • Unscored —
    CVE-2006-3916

    Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows remote attackers to injec…

  • Unscored —
    CVE-2006-3915 Public exploit EPSS 22%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterati…

  • Unscored —
    CVE-2006-3918 Public exploit EPSS 95%

    http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 befor…

    apache2 Debian
  • Unscored —
    CVE-2006-3917 Public exploit

    PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote a…

  • Unscored —
    CVE-2006-3910 Public exploit EPSS 17%

    Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service …

  • Unscored —
    CVE-2006-3919

    SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-3350

    Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted rem…

  • Unscored —
    CVE-2006-3911 Public exploit EPSS 16%

    PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-3909 Public exploit

    Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-3904 Public exploit

    SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magic_quotes_gpc disabled, allo…

  • Unscored —
    CVE-2006-3905

    SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via th…

  • Unscored —
    CVE-2006-3902

    Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites 2.0.9 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2006-3906

    Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls,…

  • Unscored —
    CVE-2006-3903

    CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to…

  • Unscored —
    CVE-2006-3907

    Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by sending a crafted packet…

  • Unscored —
    CVE-2006-3908

    Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and …

  • Unscored —
    CVE-2006-2933

    kdesktop_lock in kdebase before 3.1.3-5.11 for KDE in Red Hat Enterprise Linux (RHEL) 3 does not properly terminate, wh…

  • Unscored —
    CVE-2006-3113

    Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to c…

    thunderbird Debian
  • Unscored —
    CVE-2006-3809

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the Universa…

    thunderbird Debian
  • Unscored —
    CVE-2006-3810

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonk…

    thunderbird Debian
  • Unscored —
    CVE-2006-3811

    Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allo…

    thunderbird Debian
  • Unscored —
    CVE-2006-3805

    The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might a…

    thunderbird Debian
  • Unscored —
    CVE-2006-3802

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijac…

    thunderbird Debian
  • Unscored —
    CVE-2006-3801

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame…

    thunderbird Debian
  • Unscored —
    CVE-2006-3808

    Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code …

    thunderbird Debian
  • Unscored —
    CVE-2006-3807

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execu…

    thunderbird Debian
  • Unscored —
    CVE-2006-3677 Public exploit EPSS 80%

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chan…

  • Unscored —
    CVE-2006-3804

    Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to …

    thunderbird Debian
  • Unscored —
    CVE-2006-3803

    Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, …

    thunderbird Debian
  • Unscored —
    CVE-2006-3806

    Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and …

    thunderbird Debian
  • Unscored —
    CVE-2006-3840

    The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including …

  • Unscored —
    CVE-2006-3897 Public exploit EPSS 23%

    Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (a…

  • Unscored —
    CVE-2006-3901

    Multiple stack-based buffer overflows in Tumbleweed Email Firewall (EMF) allow remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2006-3899 Public exploit EPSS 24%

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2006-3898 Public exploit EPSS 24%

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application cra…

  • Unscored —
    CVE-2006-3900

    Cross-site scripting (XSS) vulnerability in guestbook.php in TP-Book 1.00 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2006-3633

    OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via she…

  • Unscored —
    CVE-2006-3838 Public exploit EPSS 74%

    Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in produc…

  • Unscored —
    CVE-2006-3819 Public exploit

    Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-3883 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitra…