Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

← July 2006 2006 / August September 2006 →
  1. 124
  2. 28
  3. 316
  4. 44
  5. 531
  6. 6 
  7. 717
  8. 818
  9. 942
  10. 1022
  11. 1125
  12. 12 
  13. 13 
  14. 1442
  15. 153
  16. 1613
  17. 1742
  18. 1817
  19. 19 
  20. 20 
  21. 2138
  22. 2212
  23. 2324
  24. 2426
  25. 2517
  26. 2615
  27. 27 
  28. 286
  29. 2923
  30. 3014
  31. 3155
All Critical High Medium Low Exploited only Public exploit

554 results · Feed

  • Unscored —
    CVE-2006-3499

    The dynamic linker (dyld) in Apple Mac OS X 10.3.9 allows local users to obtain sensitive information via unspecified d…

  • Unscored —
    CVE-2006-3503

    Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash…

  • Unscored —
    CVE-2006-1472

    Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthor…

  • Unscored —
    CVE-2006-1473

    Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2006-3972 Public exploit

    Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allo…

  • Unscored —
    CVE-2006-3498

    Stack-based buffer overflow in bootpd in the DHCP component for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attacker…

  • Unscored —
    CVE-2006-3496

    AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause denial of service (crash) via an invali…

  • Unscored —
    CVE-2006-3497

    Unspecified vulnerability in the "compression state handling" in Bom for Apple Mac OS X 10.3.9 and 10.4.7 allows user-a…

  • Unscored —
    CVE-2006-3495

    AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users…

  • Unscored —
    CVE-2006-3971

    Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allow…

  • Unscored —
    CVE-2006-3964 Public exploit

    PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers …

  • Unscored —
    CVE-2006-3969 Public exploit

    PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and…

  • Unscored —
    CVE-2006-3965

    Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which…

  • Unscored —
    CVE-2006-3962 Public exploit

    PHP remote file inclusion vulnerability in administrator/components/com_bayesiannaivefilter/lang.php in the bayesiannai…

  • Unscored —
    CVE-2006-3968

    The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incor…

  • Unscored —
    CVE-2006-3967 Public exploit

    PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Mos…

  • Unscored —
    CVE-2006-3970 Public exploit

    PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows …

  • Unscored —
    CVE-2006-3963 Public exploit

    Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-3966 Public exploit

    PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNews…

  • Unscored —
    CVE-2006-3956

    Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allo…

  • Unscored —
    CVE-2006-3957 Public exploit

    PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-3960 Public exploit

    SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3959 Public exploit

    SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remot…

  • Unscored —
    CVE-2006-3954

    Directory traversal vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to read arbit…

  • Unscored —
    CVE-2006-3951 Public exploit

    PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remot…

  • Unscored —
    CVE-2006-3961 Public exploit EPSS 34%

    Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite…

  • Unscored —
    CVE-2006-3952 Public exploit EPSS 67%

    Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-3950

    SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-3947 Public exploit

    PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earli…

  • Unscored —
    CVE-2006-3948 Public exploit

    Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-3949 Public exploit

    PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allo…

  • Unscored —
    CVE-2006-3958

    Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-3955 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2006-3953

    Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inj…