Archive
July 2006
Vulnerabilities first published in this month (UTC), newest first.
532 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2006-3607 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Scri…
-
Unscored —
Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allow…
-
Unscored —CVE-2006-3608 Public exploit
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the…
-
Unscored —
Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dep…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject …
-
Unscored —CVE-2006-3611 Public exploit
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitr…
-
Unscored —
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, po…
-
Unscored —
SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote atta…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote att…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterpri…
-
Unscored —
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database sche…
-
Unscored —CVE-2006-3602 Public exploit
Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attacker…
-
Unscored —CVE-2006-3604 Public exploit
Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access …
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the…
-
Unscored —
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote us…
-
Unscored —CVE-2006-3603 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attacke…
-
Unscored —
The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.…
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition pr…
-
Unscored —
SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary…
-
Unscored —
The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overw…
-
Unscored —
The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require cr…
-
Unscored —CVE-2006-3592 Public exploit
Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a…
-
Unscored —
** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows rem…
-
Unscored —
passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator s…
-
Unscored —CVE-2006-3590 EPSS 14%
mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary command…
-
Unscored —
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a craft…
-
Unscored —
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code…
-
Unscored —
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a craft…
-
Unscored —CVE-2006-1304 EPSS 11%
Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xl…
-
Unscored —
Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a .xls file with a craft…
-
Unscored —CVE-2006-1302 EPSS 14%
Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xl…
-
Unscored —
Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of serv…
-
Unscored —
Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers …
-
Unscored —
Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary comm…
-
Unscored —CVE-2006-2388 EPSS 11%
Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell co…
-
Unscored —
Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execu…
-
Unscored —
Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execut…