Skip to content
OpenAdvisories

Archive

August 2006

Vulnerabilities first published in this month (UTC), newest first.

554 results · Feed

  • Unscored —

    SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is…

  • Unscored —
    CVE-2006-4311 Public exploit

    PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrar…

  • Unscored —

    Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arb…

  • Unscored —
    CVE-2006-4308 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community …

  • Unscored —

    Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via u…

  • Unscored —
    CVE-2006-4310 Public exploit

    Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when a…

  • Unscored —

    VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to l…

  • Unscored —

    Unspecified vulnerability in the sctp_make_abort_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.…

  • Unscored —

    A regression error in the restore_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Lin…

  • Unscored —

    Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash)…

  • Unscored —
    CVE-2006-4300 Public exploit

    SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-4296 Public exploit

    PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com_babackup) for Mambo 1.1 allo…

  • Unscored —

    The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Upda…

  • Unscored —
    CVE-2006-4301 Public exploit EPSS 39%

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attri…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject ar…

  • Unscored —

    SQL injection vulnerability in shopping_cart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to…

  • Unscored —

    Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2006-4295 Public exploit

    Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject a…

  • Unscored —

    Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote atta…

  • Unscored —
    CVE-2006-3869 EPSS 44%

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions…

  • Unscored —
    CVE-2006-4288 Public exploit

    PHP remote file inclusion vulnerability in admin.a6mambocredits.php in the a6mambocredits component (com_a6mambocredits…

  • Unscored —

    Unspecified vulnerability in Niels Provos Honeyd before 1.5b allows remote attackers to cause a denial of service (appl…

  • Unscored —

    Directory traversal vulnerability in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attack…

  • Unscored —

    PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher…

  • Unscored —
    CVE-2006-4284 Public exploit

    SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-4282 Public exploit

    PHP remote file inclusion vulnerability in MamboLogin.php in the MamboWiki component (com_mambowiki) 0.9.6 and earlier …

  • Unscored —
    CVE-2006-4285 Public exploit

    PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2006-4293 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script …

  • Unscored —

    Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-4287 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attacker…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to ex…

  • Unscored —
    CVE-2006-4291 Public exploit

    PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier (Build 3.…

  • Unscored —

    PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo al…

  • Unscored —

    PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module (com_akocomment) for Mambo 4.5 allo…

  • Unscored —
    CVE-2006-4277 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Tutti Nova 1.6 and earlier allow remote attackers to execute arbi…

  • Unscored —

    PHP remote file inclusion vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop) all…

  • Unscored —
    CVE-2006-4278 Public exploit

    PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers …

  • Unscored —
    CVE-2006-4276 Public exploit

    PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2006-4279 Public exploit

    SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary…

  • Critical 9.8

    Multiple PHP remote file inclusion vulnerabilities in the lmtg_myhomepage Component (com_lmtg_myhomepage) for Mambo all…