Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

231 results · Clear filters · Feed

  • Unscored —
    CVE-2006-4053 Public exploit

    PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to ex…

  • Unscored —
    CVE-2006-4061 Public exploit

    PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when register_globals is en…

  • Unscored —
    CVE-2006-4062 Public exploit

    PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier …

  • Unscored —
    CVE-2006-4052 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote at…

  • Unscored —
    CVE-2006-4063 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers …

  • Unscored —
    CVE-2006-4051 Public exploit

    PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remot…

  • Unscored —
    CVE-2006-4050 Public exploit

    PHP remote file inclusion vulnerability in auto_check_renewals.php in phpAutoMembersArea (phpAMA) 3.2.4 and earlier all…

  • Unscored —
    CVE-2006-4055 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier …

  • Unscored —
    CVE-2006-4042 Public exploit

    Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers…

  • Unscored —
    CVE-2006-4046 Public exploit EPSS 16%

    Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlie…

  • Unscored —
    CVE-2006-4045 Public exploit

    PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-4040 Public exploit

    PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-4044 Public exploit

    PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remo…

  • Unscored —
    CVE-2006-4034 Public exploit

    PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attac…

  • Unscored —
    CVE-2006-4036 Public exploit

    PHP remote file inclusion vulnerability in includes/usercp_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.…

  • Unscored —
    CVE-2006-4029 Public exploit

    Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2006-3441 Public exploit EPSS 62%

    Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows rem…

  • Unscored —
    CVE-2006-3440 Public exploit EPSS 57%

    Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote att…

  • Unscored —
    CVE-2006-3439 Public exploit EPSS 86%

    Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote …

  • Unscored —
    CVE-2006-4025 Public exploit

    SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute ar…

  • Unscored —
    CVE-2006-4026 Public exploit

    PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via …

  • Unscored —
    CVE-2006-4024 Public exploit

    The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denia…

  • Unscored —
    CVE-2006-3444 Public exploit EPSS 16%

    Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users t…

  • Unscored —
    CVE-2006-3637 Public exploit EPSS 44%

    Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which a…

  • Unscored —
    CVE-2006-4020 Public exploit

    scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code v…

  • Unscored —
    CVE-2006-4018 Public exploit EPSS 19%

    Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 …

  • Unscored —
    CVE-2006-4011 Public exploit

    PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when regi…

  • Unscored —
    CVE-2006-4006 Public exploit

    The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet dat…

  • Unscored —
    CVE-2006-4004 Public exploit

    Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disable…

  • Unscored —
    CVE-2006-4008 Public exploit

    PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-4009 Public exploit

    Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-4010 Public exploit

    SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-4007 Public exploit

    PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute …

  • Unscored —
    CVE-2006-4012 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-0395 Public exploit EPSS 55%

    The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an…

  • Unscored —
    CVE-2006-4000 Public exploit

    Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.…

  • Unscored —
    CVE-2006-3997 Public exploit

    PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier all…

  • Unscored —
    CVE-2006-3998 Public exploit

    PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allow…

  • Unscored —
    CVE-2006-3989 Public exploit

    PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers …

  • Unscored —
    CVE-2006-3983 Public exploit

    PHP remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute a…