CVEs published in July 2006

529 vulnerabilities, 40 critical, 0 exploited.

• apple mac os x, safari +1 more WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a... CVE-2006-3946 7.5 HighJuly 31, 2006
• opera browser The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of... CVE-2006-3945 5.0 MediumJuly 31, 2006
• microsoft ie Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of... CVE-2006-3944 Public exploit EPSS 17.5% 5.0 MediumJuly 31, 2006
• microsoft ie Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2... CVE-2006-3943 Public exploit EPSS 15.6% 2.6 LowJuly 31, 2006
• microsoft windows 2000, windows 2003 server, windows xp +2 more The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote... CVE-2006-3942 Public exploit EPSS 75.0% 7.8 HighJuly 31, 2006
• sun n1 grid engine Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows... CVE-2006-3941 7.5 HighJuly 31, 2006
• phpbb group phpbb-auction Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute... CVE-2006-3940 Public exploit 7.5 HighJuly 31, 2006
• scriptscenter ezupload pro ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities... CVE-2006-3939 7.5 HighJuly 31, 2006
• dotclear DotClear allows remote attackers to obtain sensitive information via a direct request for (1)... CVE-2006-3938 5.0 MediumJuly 31, 2006
• xguestbook post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a... CVE-2006-3937 5.0 MediumJuly 31, 2006
• alkacon opencms Alkacon OpenCms Exposes JSP Source Code CVE-2006-3936 Fix available 4.0 MediumJuly 31, 2006
• alkacon opencms Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp CVE-2006-3935 Fix available 6.5 MediumJuly 31, 2006
• alkacon opencms Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter CVE-2006-3934 Fix available 4.0 MediumJuly 31, 2006
• alkacon opencms Alkacon OpenCms XSS via unsanitized message body CVE-2006-3933 Fix available 3.5 LowJuly 31, 2006
• gonafish linkscaffe SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to... CVE-2006-3932 5.1 MediumJuly 31, 2006
• tuomas airaksinen midirecord Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0... CVE-2006-3931 Public exploit 4.6 MediumJuly 31, 2006
• mamboxchange a6mambohelpdesk PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo... CVE-2006-3930 Public exploit 7.5 HighJuly 31, 2006
• zyxel prestige 660h-61 Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige... CVE-2006-3929 Public exploit 4.3 MediumJuly 31, 2006
• mikael software wmnews PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote... CVE-2006-3928 Public exploit 7.5 HighJuly 31, 2006
• php pro bid pro bid Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote... CVE-2006-3927 Public exploit 4.3 MediumJuly 31, 2006
• php pro bid pro bid Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute... CVE-2006-3926 Public exploit 7.5 HighJuly 31, 2006
• vmware esx VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication... CVE-2006-2481 Public exploit 5.0 MediumJuly 31, 2006
• tamarack consulting mmsd Tamarack MMSd before 7.992 allows remote attackers to cause a denial of service (crash) via... CVE-2006-1178 5.0 MediumJuly 29, 2006
• mozilla firefox, seamonkey, thunderbird +2 more Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows... CVE-2006-3812 Fix available 2.6 LowJuly 29, 2006
• interactual technologies player Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in... CVE-2006-3925 6.4 MediumJuly 28, 2006
• dokeos Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers... CVE-2006-3924 4.3 MediumJuly 28, 2006
• fire-mouse toplist Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when... CVE-2006-3923 2.6 LowJuly 28, 2006
• portailphp PHP remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows... CVE-2006-3922 Public exploit 7.5 HighJuly 28, 2006
• sun java system application server, java system web server +1 more Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1... CVE-2006-3921 4.0 MediumJuly 28, 2006
• intervations filecopa Integer underflow in filecpnt.exe in FileCOPA FTP Server 1.01 before 2006-07-21 allow remote... CVE-2006-3768 6.4 MediumJuly 28, 2006
• sun solaris, sunos +1 more The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to... CVE-2006-3920 5.0 MediumJuly 28, 2006
• counterpane passwordsafe Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the... CVE-2006-3675 2.1 LowJuly 28, 2006
• gnupg Integer overflow in parse_comment in GnuPG (gpg) 1.4.4 allows remote attackers to cause a denial... CVE-2006-3746 Public exploitFix available 5.0 MediumJuly 28, 2006
• apache http server, canonical ubuntu linux, debian linux +2 more Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3... CVE-2006-3747 Public exploitFix available EPSS 97.1% 7.6 HighJuly 28, 2006
• sd studio cms SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute... CVE-2006-3919 7.5 HighJuly 28, 2006
• apache http server, canonical ubuntu linux, debian linux +2 more +4 more http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache... CVE-2006-3918 Public exploitFix available EPSS 95.1% 4.3 MediumJuly 28, 2006
• r. corson php forge PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and... CVE-2006-3917 Public exploit 7.5 HighJuly 28, 2006
• solucija snews Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows... CVE-2006-3916 4.3 MediumJuly 28, 2006
• microsoft internet explorer Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of... CVE-2006-3915 Public exploit EPSS 21.6% 5.0 MediumJuly 28, 2006
• blackboard academic suite Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote... CVE-2006-3914 6.0 MediumJuly 28, 2006
• freeciv Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows... CVE-2006-3913 Fix available 7.5 HighJuly 28, 2006
• rarlab winrar Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified... CVE-2006-3912 Public exploit 2.1 LowJuly 28, 2006
• php live live PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote... CVE-2006-3911 Public exploit EPSS 16.3% 7.5 HighJuly 28, 2006
• microsoft ie Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to... CVE-2006-3910 Public exploit EPSS 17.1% 5.0 MediumJuly 28, 2006
• cimmetry systems autovue solidmodel professional Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993... CVE-2006-3350 5.1 MediumJuly 28, 2006
• brian wotring osiris Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause... CVE-2006-3120 Fix available 7.5 HighJuly 28, 2006
• wired community software wwwthreads Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to... CVE-2006-3909 Public exploit 6.8 MediumJuly 27, 2006
• gillius programming game networking engine Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network... CVE-2006-3908 7.5 HighJuly 27, 2006
• siemens speedstream wireless router Siemens SpeedStream 2624 allows remote attackers to cause a denial of service (device hang) by... CVE-2006-3907 5.0 MediumJuly 27, 2006
• cisco ios, pix firewall, adaptive security appliance software +18 more +20 more Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000... CVE-2006-3906 5.0 MediumJuly 27, 2006
• Show olderLoading…