Skip to content
OpenAdvisories

Archive

29 August 2006

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —
    CVE-2006-4443 Public exploit

    PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers t…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP co…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-4440 Public exploit

    PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers …

  • Unscored —

    pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if th…

  • Unscored —
    CVE-2006-4444 Public exploit

    Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute a…

  • Unscored —
    CVE-2006-4441 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to…

  • Unscored —

    OpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a denial of service (kernel…

  • Unscored —

    Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in the Zend Platform 2.2.…

  • Unscored —
    CVE-2006-4427 Public exploit

    index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the …

  • Unscored —

    PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04…

  • Unscored —

    The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Ci…

  • Unscored —
    CVE-2006-4421 Public exploit

    Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG…

  • Unscored —
    CVE-2006-4425 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP cod…

  • Critical 9.8
    CVE-2006-4428 Public exploit

    PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-4423 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-4424 Public exploit

    PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to exec…

  • Unscored —

    isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of …

  • Unscored —

    Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via…

  • Unscored —

    PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third …

  • Unscored —

    Directory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to overwrite arbitrary fil…

  • Unscored —
    CVE-2006-4426 Public exploit

    PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES…

  • Unscored —
    CVE-2006-4422 Public exploit

    PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote att…