CVEs published in June 2006
629 vulnerabilities, 21 critical, 0 exploited.
- skoom i.listCross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier allows remote attackers...4.3 Medium
- skoom i.listMultiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote...4.3 Medium
- kaphotoserviceMultiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow...4.3 Medium
- primoris software officeflowSQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to...7.5 High
- primoris software officeflowCross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows...4.3 Medium
- net portal dynamic system portal dynamic systemDirectory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows...5.0 Medium
- npdsMultiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and...6.8 Medium
- npdsNet Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to obtain sensitive...5.0 Medium
- mybulletinboardCross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to...6.8 Medium
- alan ward a-cartA-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access...5.0 Medium
- dmx forum forumDmx Forum 2.1a allows remote attackers to obtain username and password information via a direct...5.0 Medium
- dmx forum forumDmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which...5.0 Medium
- andreas gohr dokuwikiUnspecified vulnerability in the user profile change functionality in DokuWiki, when Access...4.0 Medium
- cgi-rescue form2mailUnspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to...5.0 Medium
- cgi-rescue webformUnspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject...7.5 High
- sun grid engine, n1 grid engine +1 moreUnspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in...4.6 Medium
- openemrPHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in...6.8 Medium
- cms-banditsMultiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when...5.1 Medium
- xfairguy codeavalanche freeforumMultiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka...4.3 Medium
- qbik wingateStack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote...7.5 High
- ingate firewall, siparator +1 moreCross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and...4.0 Medium
- ingate firewall, siparator +1 moreIngate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or...5.0 Medium
- loudhushThe iax_net_read function in the iaxclient open source library, as used in multiple products...6.4 Medium
- miraks miraksgalerieMultiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers...5.1 Medium
- cmpro team clan manager proPHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1...5.1 Medium
- out of the trees web design selectapixCross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject...2.6 Low
- out of the trees web design selectapixMultiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute...7.5 High
- gnome gdmGNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local...3.7 Low
- sylpheed, sylpheed-claws +1 moreSylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI...2.6 Low
- microsoft netmeetingUnspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial...7.8 High
- thomas boutell graphics draw libraryThe LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD)...5.4 Medium
- particle soft linksPartial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request...5.0 Medium
- particle soft linksSQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to...7.5 High
- particle soft linksCross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote...2.6 Low
- particle soft linksDirectory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access...5.0 Medium
- libtiffBuffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier...7.5 High
- sendmailSendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested,...5.0 Medium
- d-link dwl-2100apThe web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows...5.0 Medium
- canon network camera server vb101, microsoft ie +1 moreInternet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a...4.0 Medium
- estsoft internetdiskUnspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote...6.5 Medium
- digium asteriskThe IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11...7.5 High
- funkboardCross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject...2.6 Low
- funkboardprofile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a...5.0 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows...2.6 Low
- mozilla firefox, suite, seamonkey +1 more +3 moreMozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and...4.0 Medium
- ganttyindex.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via...5.0 Medium
- ganttyCross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to...4.3 Medium
- pixelpostCross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier...2.6 Low
- pixelpostPixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain...5.1 Medium
- pixelpostMultiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow...5.1 Medium
- Show moreLoading…