Archive
August 2006
Vulnerabilities first published in this month (UTC), newest first.
554 results · Feed
-
Unscored —
Gonafish.com LinksCaffe 2.0 and 3.0 do not properly restrict access to administrator functions, which allows remote att…
-
Unscored —
Joomla! before 1.0.11 does not properly unset variables when the input data includes a numeric parameter with a value m…
-
Unscored —
Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings…
-
Unscored —
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an…
-
Unscored —
The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside…
-
Unscored —
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an…
-
Unscored —CVE-2006-4464 Public exploit
The Nokia Browser, possibly Nokia Symbian 60 Browser 3rd edition, allows remote attackers to cause a denial of service …
-
Unscored —
Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows remote attackers to perform "remote execution," r…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.11 allow remote attackers to inject arbitrary…
-
Unscored —
SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote att…
-
Unscored —
Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown im…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2006-4458 Public exploit
Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allo…
-
Unscored —CVE-2006-4456 Public exploit
PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execu…
-
Unscored —
SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie mat…
-
Unscored —CVE-2006-4454 Public exploit
Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2006-4455 Public exploit
Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via u…
-
Unscored —CVE-2006-4452 Public exploit
PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when regi…
-
Unscored —CVE-2006-4450 Public exploit
usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web…
-
Unscored —CVE-2006-4449 Public exploit
Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions …
-
Unscored —
Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long datab…
-
Unscored —
Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 S…
-
Unscored —
Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code vi…
-
Unscored —CVE-2006-4448 Public exploit
Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is enabled, allow remote atta…
-
Unscored —
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values fo…
-
Unscored —CVE-2005-4809 Public exploit
Mozilla Firefox 1.0.1 and possibly other versions, including Mozilla and Thunderbird, allows remote attackers to spoof …
-
Unscored —CVE-2005-4810 EPSS 14%
Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "t…
-
Unscored —
Microsoft Internet Explorer allows remote attackers to cause a denial of service (resource consumption) via a Javascrip…
-
Unscored —CVE-2006-4443 Public exploit
PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers t…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-4440 Public exploit
PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers …
-
Unscored —
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if th…
-
Unscored —CVE-2006-4444 Public exploit
Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute a…
-
Unscored —CVE-2006-4441 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to…
-
Unscored —
OpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a denial of service (kernel…
-
Unscored —
Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in the Zend Platform 2.2.…
-
Unscored —CVE-2006-4427 Public exploit
index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the …
-
Unscored —
PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04…