Skip to content
OpenAdvisories

Archive

July 2006

Vulnerabilities first published in this month (UTC), newest first.

← June 2006 2006 / July August 2006 →
  1. 1 
  2. 2 
  3. 314
  4. 4 
  5. 54
  6. 653
  7. 729
  8. 81
  9. 9 
  10. 1027
  11. 1119
  12. 1220
  13. 1357
  14. 1436
  15. 151
  16. 16 
  17. 1718
  18. 1830
  19. 1946
  20. 209
  21. 2144
  22. 22 
  23. 23 
  24. 243
  25. 2532
  26. 261
  27. 2740
  28. 2821
  29. 292
  30. 30 
  31. 3125
All Critical High Medium Low Exploited only Public exploit

532 results · Feed

  • Unscored —
    CVE-2006-3687 Public exploit EPSS 19%

    Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI…

  • Unscored —
    CVE-2006-3692 Public exploit

    PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to …

  • Unscored —
    CVE-2006-3632

    Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and p…

    wireshark Debian
  • Unscored —
    CVE-2006-3684

    PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers t…

  • Unscored —
    CVE-2006-3468 Public exploit EPSS 16%

    Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system pan…

  • Unscored —
    CVE-2006-3680 Public exploit

    Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-3685 Public exploit

    PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-3690 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2006-3673

    nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (applicati…

  • Unscored —
    CVE-2006-3670 Public exploit

    Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a req…

  • Unscored —
    CVE-2006-3672 Public exploit

    KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the…

  • Unscored —
    CVE-2006-3674

    nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consu…

  • Unscored —
    CVE-2006-3671

    Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.…

  • Unscored —
    CVE-2006-3661

    Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-3664

    Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial…

  • Unscored —
    CVE-2006-3669

    Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat log…

  • Unscored —
    CVE-2006-3668 Public exploit EPSS 10%

    Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and ea…

    libdumb Debian
  • Unscored —
    CVE-2006-3666

    SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-3663

    Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local u…

  • Unscored —
    CVE-2006-3667

    Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact…

  • Unscored —
    CVE-2006-3662 Public exploit

    SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-3665

    SquirrelMail 1.4.6 and earlier, with register_globals enabled, allows remote attackers to hijack cookies in src/redirec…

  • Unscored —
    CVE-2006-3652 EPSS 19%

    Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters…

  • Unscored —
    CVE-2006-3653 Public exploit EPSS 15%

    wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consum…

  • Unscored —
    CVE-2006-3655 Public exploit EPSS 21%

    Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary c…

  • Unscored —
    CVE-2006-3657 EPSS 17%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXI…

  • Unscored —
    CVE-2006-3660 Public exploit EPSS 18%

    Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to p…

  • Unscored —
    CVE-2006-3656 Public exploit EPSS 21%

    Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a …

  • Unscored —
    CVE-2006-3658 EPSS 13%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object refe…

  • Unscored —
    CVE-2006-3654 EPSS 48%

    Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2006-3659 EPSS 15%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or U…

  • Unscored —
    CVE-2006-3626

    Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_S…

  • Unscored —
    CVE-2006-3625

    FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) a…

  • Unscored —
    CVE-2006-3620

    Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject…

  • Unscored —
    CVE-2006-3624 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-3622

    The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote…

  • Unscored —
    CVE-2006-3623

    Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earli…

  • Unscored —
    CVE-2006-3621 Public exploit

    SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-2450

    auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifi…

    libvncserver Debian
  • Unscored —
    CVE-2006-3616 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacke…