Archive
July 2006
Vulnerabilities first published in this month (UTC), newest first.
532 results · Feed
-
Unscored —
Buffer overflow in Adobe Acrobat 6.0 to 6.0.4 allows remote attackers to execute arbitrary code via unknown vectors in …
-
Unscored —
Unknown vulnerability in the Buffer Overflow Protection in McAfee VirusScan Enterprise 8.0.0 allows local users to caus…
-
Unscored —
Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote atta…
-
Unscored —CVE-2006-3580 Public exploit
SQL injection vulnerability in pages.asp in ASP Stats Generator before 2.1.2 allows remote attackers to execute arbitra…
-
Unscored —
SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-2…
-
Unscored —CVE-2006-3577 Public exploit
SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Format string vulnerability in the WriteText function in agl_text.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remo…
-
Unscored —
Unspecified vulnerability in NetApp Data ONTAP 7.0x through 7.0.4P8D9, 7.1x, 7.1.0.1x, and 7.2RC1, RC2, and RC3, as use…
-
Unscored —CVE-2006-3568 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Fantastic Guestbook 2.0.1, and possibly earlier…
-
Unscored —
SQL injection vulnerability in search.results.php in HiveMail 1.3 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the webform module in Drupal 4.6 before July 8, 2006 and 4.7 before July 8,…
-
Unscored —
search.results.php in HiveMail 3.1 and earlier allows remote attackers to obtain the installation path via certain mani…
-
Unscored —CVE-2006-3562 Public exploit
PHP remote file inclusion vulnerabilities in plume cms 1.0.4 allow remote attackers to execute arbitrary PHP code via a…
-
Unscored —CVE-2006-3571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in interna/hilfe.php in Papoo 3 RC3 and earlier allow remote attack…
-
Unscored —CVE-2006-3563 Public exploit
Cross-site scripting (XSS) vulnerability in gallery/thumb.php in Winged Gallery 1.0 allows remote attackers to inject a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the web administration interface logging feature in Juniper Networks (Redli…
-
Unscored —CVE-2006-3561 Public exploit
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers…
-
Unscored —CVE-2006-3572 Public exploit
SQL injection vulnerability in forumthread.php in Papoo 3 RC3 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-3560 Public exploit
SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary…
-
Medium 5.5
EMC VMware Player allows user-assisted attackers to cause a denial of service (unrecoverable application failure) via a…
-
Unscored —
Check Point Zone Labs ZoneAlarm Internet Security Suite 6.5.722.000, 6.1.737.000, and possibly other versions do not pr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject ar…
-
Unscored —
services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in DKScript.com Dragon's Kingdom Script 1.0 allow remote attackers …
-
Unscored —
NCP Secure Enterprise Client (aka VPN/PKI client) 8.30 Build 59, and possibly earlier versions, when the Link Firewall …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 throu…
-
Unscored —CVE-2006-3545 EPSS 14%
Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web…
-
Unscored —
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to…
-
Unscored —
PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct requ…
-
Unscored —
Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject a…
-
Unscored —
MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows r…
-
Unscored —CVE-2006-3543 Public exploit
Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbi…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to injec…
-
Unscored —
SQL injection vulnerability in Meine Links (aka My Links) in Kyberna ky2help allows remote authenticated users to execu…