Skip to content
OpenAdvisories

Archive

14 August 2006

Vulnerabilities first published on this day (UTC), newest first.

← July 2006 2006 / August /14 September 2006 →
  1. 124
  2. 28
  3. 316
  4. 44
  5. 531
  6. 6 
  7. 717
  8. 818
  9. 942
  10. 1022
  11. 1125
  12. 12 
  13. 13 
  14. 1442
  15. 153
  16. 1613
  17. 1742
  18. 1817
  19. 19 
  20. 20 
  21. 2138
  22. 2212
  23. 2324
  24. 2426
  25. 2517
  26. 2615
  27. 27 
  28. 286
  29. 2923
  30. 3014
  31. 3155
All Critical High Medium Low Exploited only Public exploit

42 results · Feed

  • Unscored —
    CVE-2006-4134

    Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 a…

  • Unscored —
    CVE-2006-4125 Public exploit

    Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-4127

    Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbi…

  • Unscored —
    CVE-2006-4139

    Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors r…

  • Unscored —
    CVE-2006-4142 Public exploit

    SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-4135

    PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote atta…

  • Unscored —
    CVE-2006-4126 Public exploit

    The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2006-4133

    Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote…

  • Unscored —
    CVE-2006-4123 Public exploit

    PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execu…

  • Unscored —
    CVE-2006-4119

    SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-4141

    SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-4122 Public exploit

    Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries…

  • Unscored —
    CVE-2006-4138 Public exploit EPSS 20%

    Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers…

  • Unscored —
    CVE-2006-4136

    Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and att…

  • Unscored —
    CVE-2006-4129 Public exploit

    PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlie…

  • Unscored —
    CVE-2006-4137

    IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vector…

  • Unscored —
    CVE-2006-4121 Public exploit

    PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2006-4131 Public exploit

    Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, al…

  • Unscored —
    CVE-2006-4132

    ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a…

  • Unscored —
    CVE-2006-4130 Public exploit

    PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and e…

  • Unscored —
    CVE-2006-4140 Public exploit

    Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitr…

  • Unscored —
    CVE-2006-4118

    Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-4120

    Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier al…

  • Unscored —
    CVE-2006-4128

    Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server…

  • Unscored —
    CVE-2006-4124

    The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment va…

  • Unscored —
    CVE-2006-4114 Public exploit

    SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and earlier allows remote attackers to…

  • High —
    CVE-2006-4111

    Ruby on Rails vulnerable to code injection

    Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

    rails rails Debian RubyGems
  • High —
    CVE-2006-4112

    Rails Denial of Service vulnerability

    Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (appl…

    rails rails Debian RubyGems
  • Unscored —
    CVE-2006-4113 Public exploit

    PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions all…

  • Unscored —
    CVE-2006-4115 Public exploit

    PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when register_globals is enabled, allows r…

  • Unscored —
    CVE-2006-4116

    Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2006-4117

    The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause…

  • Unscored —
    CVE-2006-1168

    The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote attackers to cause a denial…

    ncompress Debian
  • Unscored —
    CVE-2006-4104

    Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject …

  • Unscored —
    CVE-2006-4105

    Cross-site scripting (XSS) vulnerability in Fill Threads Database (FTD) 3.7.3 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-4102 Public exploit

    PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier all…

  • Unscored —
    CVE-2006-4108

    SQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.…

  • Unscored —
    CVE-2006-4103 Public exploit

    PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote atta…

  • Unscored —
    CVE-2006-4109

    Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 befor…

  • Unscored —
    CVE-2006-4107

    SQL injection vulnerability in the Job Search module (job.module) 4.6 before revision 1.3.2.1 in Drupal allows remote a…