Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

231 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4273 Public exploit

    Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.5.4 and 3.6.0 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-4267 Public exploit

    Multiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-4270 Public exploit

    PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and ea…

  • Unscored —
    CVE-2006-4254 Public exploit

    Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspeci…

  • Unscored —
    CVE-2006-4253 Public exploit EPSS 15%

    Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (…

  • Unscored —
    CVE-2006-4236 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-4239 Public exploit

    PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier all…

  • Unscored —
    CVE-2006-4238 Public exploit

    SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2006-4242 Public exploit

    PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote…

  • Unscored —
    CVE-2006-4237 Public exploit

    PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and…

  • Unscored —
    CVE-2006-4241 Public exploit

    PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) al…

  • Unscored —
    CVE-2006-4240 Public exploit

    PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-4227 Public exploit EPSS 14%

    MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's…

  • Unscored —
    CVE-2006-4234 Public exploit

    PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attack…

  • Unscored —
    CVE-2006-4230 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to exec…

  • Unscored —
    CVE-2005-4807 Public exploit EPSS 12%

    Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundat…

  • Unscored —
    CVE-2006-4219 Public exploit EPSS 22%

    The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possib…

  • Unscored —
    CVE-2006-4217 Public exploit

    PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers …

  • Unscored —
    CVE-2006-4209 Public exploit

    PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers t…

  • Unscored —
    CVE-2006-4208 Public exploit EPSS 12%

    Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allow…

  • Unscored —
    CVE-2006-4210 Public exploit

    nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to u…

  • Unscored —
    CVE-2006-4202 Public exploit

    SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2006-4196 Public exploit

    PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers…

  • Unscored —
    CVE-2006-4215 Public exploit

    PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register_globals is enabled,…

  • Unscored —
    CVE-2006-4197 Public exploit EPSS 15%

    Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 84…

  • Unscored —
    CVE-2006-4206 Public exploit

    Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and…

  • Unscored —
    CVE-2006-4198 Public exploit

    PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_global…

  • Unscored —
    CVE-2006-4205 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute…

  • Unscored —
    CVE-2006-4204 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to exec…

  • Unscored —
    CVE-2006-4207 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to …

  • Unscored —
    CVE-2006-4203 Public exploit

    PHP remote file inclusion vulnerability in help.mmp.php in the MMP Component (com_mmp) 1.2 and earlier for Mambo allows…

  • Unscored —
    CVE-2006-4213 Public exploit

    PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows r…

  • Unscored —
    CVE-2006-4195 Public exploit

    PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) …

  • Unscored —
    CVE-2006-4193 Public exploit EPSS 47%

    Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service an…

  • Unscored —
    CVE-2006-4192 Public exploit

    Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used i…

  • Unscored —
    CVE-2006-4190 Public exploit

    Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arb…

  • Unscored —
    CVE-2006-4191 Public exploit

    Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-3121 Public exploit EPSS 14%

    The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2…

  • Unscored —
    CVE-2006-4164 Public exploit

    PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attacke…

  • Unscored —
    CVE-2006-4156 Public exploit

    PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to ex…