Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

554 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12…

  • Unscored —
    CVE-2006-4364 Public exploit EPSS 57%

    Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attacke…

  • Unscored —

    SQL injection vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12:02:27 allows…

  • Unscored —
    CVE-2006-4354 Public exploit

    PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote att…

  • Unscored —

    The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if…

  • Unscored —

    Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attacker…

  • Unscored —

    Multiple buffer overflows in ImageMagick before 6.2.9 allow user-assisted attackers to execute arbitrary code via craft…

  • Unscored —

    Multiple integer overflows in ImageMagick before 6.2.9 allows user-assisted attackers to execute arbitrary code via cra…

  • Unscored —

    Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) F…

  • Unscored —

    The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 300…

  • Unscored —

    SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,9…

  • Unscored —

    SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-4348 Public exploit

    PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Ma…

  • Unscored —
    CVE-2006-4349 Public exploit

    PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP…

  • Unscored —

    Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to e…

  • Unscored —

    Unspecified vulnerability in the DHCP dissector in Wireshark (formerly Ethereal) 0.10.13 through 0.99.2, when run on Wi…

  • Unscored —

    CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails …

  • Unscored —

    Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which al…

  • Unscored —

    Multiple off-by-one errors in the IPSec ESP preference parser in Wireshark (formerly Ethereal) 0.99.2 allow remote atta…

  • Unscored —

    Unspecified vulnerability in the SCSI dissector in Wireshark (formerly Ethereal) 0.99.2 allows remote attackers to caus…

  • Unscored —

    The SSCOP dissector in Wireshark (formerly Ethereal) before 0.99.3 allows remote attackers to cause a denial of service…

  • Unscored —

    PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers t…

  • Unscored —

    Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "Fi…

  • Unscored —
    CVE-2006-4329 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote at…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in attachment.php in WoltLab Burning Board (WBB) 2.3.5 allows remote attackers…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attac…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in add_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject…

  • Unscored —

    SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magic_quotes_gpc is disabled, allows remote …

  • Unscored —
    CVE-2006-4318 Public exploit EPSS 62%

    Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

  • Unscored —

    Stack-based buffer overflow in Justsystem Ichitaro 9.x through 13.x, Ichitaro 2004, 2005, 2006, and Government 2006; Ic…

  • Unscored —
    CVE-2006-4322 Public exploit

    PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component (com_estateagent) for Mambo, wh…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in add_url.php in CloudNine Interactive Links Manager 2006-06-12 al…

  • Unscored —

    SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magic_quotes_gpc is di…

  • Unscored —
    CVE-2006-4321 Public exploit

    PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component (com_cpg) 1.0 and earlier …

  • Unscored —
    CVE-2006-4304 EPSS 12%

    Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBS…

  • Unscored —

    The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial …

  • Unscored —
    CVE-2006-4313 Public exploit EPSS 12%

    Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x …

  • Unscored —

    Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.…

  • Unscored —

    Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and…