Archive
9 August 2006
Vulnerabilities first published on this day (UTC), newest first.
42 results · Feed
-
Unscored —CVE-2006-4042 Public exploit
Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers…
-
Unscored —
Netious CMS 0.4 initializes session IDs based on the client IP address, which allows remote attackers to gain access to…
-
Unscored —
Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlie…
-
Unscored —CVE-2006-4045 Public exploit
PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PH…
-
Unscored —
Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overw…
-
Unscored —CVE-2006-4040 Public exploit
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to …
-
Unscored —
SQL injection vulnerability in index.php in Netious CMS 0.4 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to ex…
-
Unscored —CVE-2006-4044 Public exploit
PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remo…
-
Unscored —
index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attack…
-
Unscored —CVE-2006-4034 Public exploit
PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attac…
-
Unscored —
Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information …
-
Unscored —
Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execut…
-
Unscored —
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to ex…
-
Unscored —
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE …
-
Unscored —
Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafte…
-
Unscored —CVE-2006-4036 Public exploit
PHP remote file inclusion vulnerability in includes/usercp_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.…
-
Unscored —
SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute ar…
-
Unscored —
The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of…
-
Unscored —CVE-2006-4029 Public exploit
Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code v…
-
Unscored —
Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due…
-
Unscored —
The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running o…
-
Unscored —
The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAP…
-
Unscored —
The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2…
-
Unscored —
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows rem…
-
Unscored —
Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote att…
-
Unscored —
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote …
-
Unscored —CVE-2006-3648 EPSS 24%
Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attack…
-
Unscored —
Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allo…
-
Unscored —CVE-2006-4025 Public exploit
SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute ar…
-
Unscored —CVE-2006-4026 Public exploit
PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via …
-
Unscored —CVE-2006-4024 Public exploit
The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denia…
-
Unscored —
Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execut…
-
Unscored —
The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network I…
-
Unscored —CVE-2006-3449 EPSS 43%
Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted r…
-
Unscored —CVE-2006-3643 EPSS 21%
Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access t…
-
Unscored —CVE-2006-3639 EPSS 32%
Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, …
-
Unscored —CVE-2006-3649 EPSS 10%
Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 …
-
Unscored —CVE-2006-3438 EPSS 12%
Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-as…