CVEs published in June 2006

629 vulnerabilities, 21 critical, 0 exploited.

• greg roelofs libpng Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows... CVE-2006-3334 7.5 HighJune 30, 2006
• phpoutsourcing zorum Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers... CVE-2006-3333 2.6 LowJune 30, 2006
• phpoutsourcing zorum SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute... CVE-2006-3332 7.5 HighJune 30, 2006
• opera browser Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an... CVE-2006-3331 5.0 MediumJune 30, 2006
• deltascripts php classifieds Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP... CVE-2006-3330 6.8 MediumJune 30, 2006
• deltascripts php classifieds SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows... CVE-2006-3329 Public exploit 7.5 HighJune 30, 2006
• starflow software hostflow new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication... CVE-2006-3328 5.8 MediumJune 30, 2006
• e-cbd.biz custom dating biz dating script Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote... CVE-2006-3327 4.3 MediumJune 30, 2006
• joesph leung quickzip Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to... CVE-2006-3326 2.6 LowJune 30, 2006
• id software quake 3 engine client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3)... CVE-2006-3325 Public exploitFix available 5.0 MediumJune 30, 2006
• id software quake 3 engine The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine ... CVE-2006-3324 Public exploitFix available 5.0 MediumJune 30, 2006
• mastersfusion mf piadas PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote... CVE-2006-3323 Public exploit 7.5 HighJune 30, 2006
• linux kernel SCTP conntrack (ip_conntrack_proto_sctp.c) in netfilter for Linux kernel 2.6.17 before 2.6.17.3... CVE-2006-2934 5.0 MediumJune 30, 2006
• spiffyjr phpraid SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly... CVE-2006-3322 5.1 MediumJune 30, 2006
• canonical spread spread uses a temporary file with a static filename based on the port number, which allows local... CVE-2006-3118 1.2 LowJune 30, 2006
• 2enetworx openforum Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and... CVE-2006-3321 4.3 MediumJune 30, 2006
• sitebar Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows... CVE-2006-3320 Fix available 2.6 LowJune 30, 2006
• php icalendar icalendar Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and earlier... CVE-2006-3319 4.3 MediumJune 30, 2006
• openoffice, sun staroffice +1 more Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before... CVE-2006-3117 7.6 HighJune 30, 2006
• openoffice, sun staroffice +1 more Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5... CVE-2006-2199 7.6 HighJune 30, 2006
• openoffice, sun staroffice +1 more OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted... CVE-2006-2198 7.6 HighJune 30, 2006
• apple itunes Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or... CVE-2006-1467 5.1 MediumJune 29, 2006
• spiffyjr phpraid SQL injection vulnerability in register.php for phpRaid 3.0.6 and possibly other versions, when... CVE-2006-3318 5.1 MediumJune 29, 2006
• spiffyjr phpraid PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute... CVE-2006-3317 Public exploit EPSS 17.1% 5.1 MediumJune 29, 2006
• spiffyjr phpraid Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to... CVE-2006-3316 5.1 MediumJune 29, 2006
• spiffyjr phpraid Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote... CVE-2006-3116 5.1 MediumJune 29, 2006
• spiffyjr phpraid SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows... CVE-2006-3115 5.1 MediumJune 29, 2006
• rahnemaco PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product,... CVE-2006-3315 Public exploit 7.5 HighJune 29, 2006
• rahnemaco PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product,... CVE-2006-3314 Public exploit 7.5 HighJune 29, 2006
• netsoft smartnet Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote... CVE-2006-3313 2.6 LowJune 29, 2006
• qatraq Multiple cross-site scripting (XSS) vulnerabilities in ashmans and Bill Echlin QaTraq 6.5 RC and... CVE-2006-3312 4.3 MediumJune 29, 2006
• novell groupwise Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow... CVE-2006-3268 5.0 MediumJune 29, 2006
• internet scout project scout portal toolkit SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and... CVE-2006-3309 Public exploit 7.5 HighJune 29, 2006
• zoid technologies project eros bbsengine Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has... CVE-2006-3308 9.3 HighJune 29, 2006
• zoid technologies project eros bbsengine Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550... CVE-2006-3307 7.5 HighJune 29, 2006
• zoid technologies project eros bbsengine Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in... CVE-2006-3306 4.3 MediumJune 29, 2006
• uebimiau Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and... CVE-2006-3305 2.6 LowJune 29, 2006
• deluxebb SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to... CVE-2006-3304 Public exploit 7.5 HighJune 29, 2006
• deluxebb Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow... CVE-2006-3303 4.3 MediumJune 29, 2006
• cbsms mambo module PHP remote file inclusion vulnerability in mod_cbsms.php in CBSMS Mambo Module 1.0 and earlier,... CVE-2006-3302 5.1 MediumJune 29, 2006
• phpqladmin Multiple cross-site scripting (XSS) vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote... CVE-2006-3301 2.6 LowJune 29, 2006
• phpmysms PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier... CVE-2006-3300 Public exploit 7.5 HighJune 29, 2006
• metalheadws usenet Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote... CVE-2006-3299 Public exploit 2.6 LowJune 29, 2006
• yahoo messenger Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service ... CVE-2006-3298 Public exploit 5.0 MediumJune 29, 2006
• uebimiau Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier... CVE-2006-3297 4.3 MediumJune 29, 2006
• george currums open guestbook SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute... CVE-2006-3296 Public exploit 7.5 HighJune 29, 2006
• georgecurrums open guestbook Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote... CVE-2006-3295 Public exploit 4.3 MediumJune 29, 2006
• cbsms mambo module PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and... CVE-2006-3294 Public exploit 5.1 MediumJune 29, 2006
• proton energymech irc bot parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial... CVE-2006-3293 5.0 MediumJune 29, 2006
• jaws SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute... CVE-2006-3292 Public exploit 7.5 HighJune 28, 2006
• Show olderLoading…