Archive
August 2006
Vulnerabilities first published in this month (UTC), newest first.
554 results · Feed
-
Unscored —
idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecif…
-
Unscored —
Unspecified vulnerability in the TIFF viewer (possibly libTIFF) in the Photo Viewer in the Sony PlaystationPortable (PS…
-
Unscored —
Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.…
-
Unscored —CVE-2006-4497 Public exploit
SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arb…
-
Unscored —
ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the "Administra…
-
Unscored —
DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with insufficient access control, whic…
-
Unscored —CVE-2006-4498 Public exploit
PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows rem…
-
Unscored —CVE-2006-4504 Public exploit
SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and …
-
Unscored —CVE-2006-4488 Public exploit
PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_…
-
Unscored —
Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execu…
-
Unscored —CVE-2006-4505 Public exploit
CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and c…
-
Unscored —
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before …
-
Unscored —
Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary w…
-
Unscored —
Directory traversal vulnerability in link.php in NX5Linx 1.0 allows remote attackers to read arbitrary files via the lo…
-
Unscored —
Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execu…
-
Unscored —
Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows allows remote attackers to obtain sensitive inform…
-
Unscored —
SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
ModernBill 5.0.4 and earlier uses cURL with insecure settings for CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST tha…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitr…
-
Unscored —
xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users …
-
Unscored —CVE-2006-4490 Public exploit
Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 a…
-
Unscored —
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 a…
-
Unscored —
The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.
-
Unscored —CVE-2006-4479 Public exploit
Cross-site scripting (XSS) vulnerability in loginreq2.php in Visual Shapers ezContents 2.0.3 allows remote attackers to…
-
Unscored —
Incomplete blacklist vulnerability in the nk_CSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers …
-
Unscored —
Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows…
-
Unscored —
The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir s…
-
Unscored —
Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP b…
-
Unscored —CVE-2006-4477 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ezContents 2.0.3 allow remote attackers to execute…
-
Unscored —CVE-2006-4478 Public exploit
SQL injection vulnerability in headeruserdata.php in Visual Shapers ezContents 2.0.3 allows remote attackers to execute…
-
Unscored —
The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/streams.c in PHP before 5.1.5 permit the CURLOPT_FOL…
-
Unscored —
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dep…
-
Unscored —
Array index error in tetrinet.c in gtetrinet 0.7.8 and earlier allows remote attackers to execute arbitrary code via a …
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.96 allows remote attackers to inject arbitrary we…
-
Unscored —
Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vect…
-
Unscored —
Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresse…
-
Unscored —
Unspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is set, allows attackers t…
-
Unscored —
Simple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the in…
-
Unscored —
Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow attackers to bypass user authentication via unknown…