Skip to content
OpenAdvisories

Archive

24 August 2006

Vulnerabilities first published on this day (UTC), newest first.

← July 2006 2006 / August /24 September 2006 →
  1. 124
  2. 28
  3. 316
  4. 44
  5. 531
  6. 6 
  7. 717
  8. 818
  9. 942
  10. 1022
  11. 1125
  12. 12 
  13. 13 
  14. 1442
  15. 153
  16. 1613
  17. 1742
  18. 1817
  19. 19 
  20. 20 
  21. 2138
  22. 2212
  23. 2324
  24. 2426
  25. 2517
  26. 2615
  27. 27 
  28. 286
  29. 2923
  30. 3014
  31. 3155
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Unscored —
    CVE-2006-4347

    SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,9…

  • Unscored —
    CVE-2006-4350

    SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2006-4351

    Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-4348 Public exploit

    PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Ma…

  • Unscored —
    CVE-2006-4349 Public exploit

    PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2006-4345

    Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to e…

    asterisk Debian
  • Unscored —
    CVE-2006-4332

    Unspecified vulnerability in the DHCP dissector in Wireshark (formerly Ethereal) 0.10.13 through 0.99.2, when run on Wi…

  • Unscored —
    CVE-2006-4344

    CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails …

  • Unscored —
    CVE-2006-4346

    Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which al…

    asterisk Debian
  • Unscored —
    CVE-2006-4331

    Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote atta…

    wireshark Debian
  • Unscored —
    CVE-2006-4330

    Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to caus…

    wireshark Debian
  • Unscored —
    CVE-2006-4333

    The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service…

    wireshark Debian
  • Unscored —
    CVE-2006-4320

    PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers t…

  • Unscored —
    CVE-2006-4319

    Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "Fi…

  • Unscored —
    CVE-2006-4329 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote at…

  • Unscored —
    CVE-2006-4317

    Cross-site scripting (XSS) vulnerability in attachment.php in WoltLab Burning Board (WBB) 2.3.5 allows remote attackers…

  • Unscored —
    CVE-2006-4325

    Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attac…

  • Unscored —
    CVE-2006-4324

    Cross-site scripting (XSS) vulnerability in add_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject…

  • Unscored —
    CVE-2006-4323

    SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magic_quotes_gpc is disabled, allows remote …

  • Unscored —
    CVE-2006-4318 Public exploit EPSS 62%

    Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

  • Unscored —
    CVE-2006-4326

    Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ic…

  • Unscored —
    CVE-2006-4322 Public exploit

    PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component (com_estateagent) for Mambo, wh…

  • Unscored —
    CVE-2006-4327

    Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006-06-12 al…

  • Unscored —
    CVE-2006-4328

    SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magic_quotes_gpc is di…

  • Unscored —
    CVE-2006-4321 Public exploit

    PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier …

  • Unscored —
    CVE-2006-4304 EPSS 12%

    Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBS…