Skip to content
OpenAdvisories

Archive

30 August 2006

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4454 Public exploit

    Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-4455 Public exploit

    Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via u…

  • Unscored —
    CVE-2006-4452 Public exploit

    PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regi…

  • Unscored —
    CVE-2006-4450 Public exploit

    usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web…

  • Unscored —
    CVE-2006-4449 Public exploit

    Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions …

  • Unscored —
    CVE-2006-4305 Public exploit EPSS 72%

    Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long datab…

  • Unscored —
    CVE-2006-4446 Public exploit EPSS 62%

    Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 S…

  • Unscored —
    CVE-2006-4448 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is enabled, allow remote atta…

  • Unscored —
    CVE-2005-4809 Public exploit

    Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof …