Archive
August 2006
Vulnerabilities first published in this month (UTC), newest first.
554 results · Feed
-
Unscored —CVE-2006-3451 EPSS 41%
Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheet…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary we…
-
Unscored —
Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which a…
-
Unscored —
Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link …
-
Unscored —
IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared me…
-
Unscored —
Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote …
-
Unscored —
The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitr…
-
Unscored —
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions…
-
Unscored —
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows a…
-
Unscored —
IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of se…
-
Unscored —
Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Window…
-
Unscored —
PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local…
-
Unscored —CVE-2006-4020 Public exploit
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code v…
-
Unscored —
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 …
-
Unscored —CVE-2006-4011 Public exploit
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when regi…
-
Unscored —CVE-2006-4006 Public exploit
The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet dat…
-
Unscored —CVE-2006-4004 Public exploit
Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disable…
-
Unscored —CVE-2006-4008 Public exploit
PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitr…
-
Unscored —
Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 allow remote attackers t…
-
Unscored —CVE-2006-4009 Public exploit
Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to …
-
Unscored —
BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain ma…
-
Unscored —
Cross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 before 4.6.9, and 4.7 before 4.7.3, allows remote…
-
Unscored —CVE-2006-4010 Public exploit
SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbit…
-
Unscored —
Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allo…
-
Unscored —CVE-2006-4007 Public exploit
PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute …
-
Unscored —CVE-2006-4012 Public exploit
Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbi…
-
Unscored —
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Cent…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the search module in Inter Network Marketing (INM) CMS G3 allows remote att…
-
Unscored —
The config method in Henrik Storner Hobbit monitor before 4.1.2p2 permits access to files outside of the intended confi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earl…
-
Unscored —
Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptogra…
-
Unscored —
The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an…
-
Unscored —CVE-2006-4000 Public exploit
Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.…
-
Unscored —
Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest ac…
-
Unscored —
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of th…
-
Unscored —CVE-2006-3997 Public exploit
PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier all…
-
Unscored —CVE-2006-3998 Public exploit
PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allow…
-
Unscored —
Unspecified vulnerability in the Mac OS X kernel before 10.3.8 allows local users to cause a denial of service (tempora…
-
Unscored —
The CoreGraphics Window Server in Mac OS X 10.4.1 allows local users with console access to gain privileges by "launchi…
-
Unscored —
Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arb…