Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
July

CVEs published in July 2006

529 vulnerabilities, 40 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

torTor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote...CVE-2006-3412Fix available6.4 MediumJuly 7, 2006
torTLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather...CVE-2006-3411Fix available6.4 MediumJuly 7, 2006
torTor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit...CVE-2006-3410Fix available5.0 MediumJuly 7, 2006
torInteger overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via...CVE-2006-3409Fix available7.5 HighJuly 7, 2006
torUnspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows...CVE-2006-3408Fix available5.0 MediumJuly 7, 2006
torTor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code...CVE-2006-3407Fix available6.4 MediumJuly 7, 2006
qto qtofilemanagerDirectory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to...CVE-2006-34066.4 MediumJuly 7, 2006
qto qtofilemanagerCross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote...CVE-2006-3405Public exploit5.8 MediumJuly 7, 2006
gimpBuffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12...CVE-2006-3404Fix available5.1 MediumJuly 6, 2006
virtuastoreSQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL...CVE-2006-3402Public exploit7.5 HighJuly 6, 2006
id software quake 3 engineStack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows...CVE-2006-3401Public exploit7.5 HighJuly 6, 2006
id software quake 3 engine, raven software soldier of fortune 2 +1 moreStack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier...CVE-2006-3400Public exploit7.5 HighJuly 6, 2006
moniwikiCross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows...CVE-2006-33992.6 LowJuly 6, 2006
pkr internet taskjitsuThe "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form...CVE-2006-33985.0 MediumJuly 6, 2006
pkr internet taskjitsuMultiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote...CVE-2006-33974.3 MediumJuly 6, 2006
miro international galleriaPHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and...CVE-2006-3396Public exploit6.8 MediumJuly 6, 2006
webdesignhq sitebuilder-fxPHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers...CVE-2006-3395Public exploit5.1 MediumJuly 6, 2006
bxcpSQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers...CVE-2006-3394Public exploit7.5 HighJuly 6, 2006
electronic arts nascar racingPapyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1...CVE-2006-33937.8 HighJuly 6, 2006
usermin, webmin +1 moreWebmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding...CVE-2006-3392Public exploitEPSS 79.5%5.0 MediumJuly 6, 2006
imbc imbccontents activex controlThe Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to...CVE-2006-33915.1 MediumJuly 6, 2006
wordpressWordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to...CVE-2006-3390Fix available5.0 MediumJuly 6, 2006
wordpressindex.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL...CVE-2006-3389Fix available5.0 MediumJuly 6, 2006
phpmyadminCross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to...CVE-2006-3388Fix available5.8 MediumJuly 6, 2006
fusionphp fusion newsDirectory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals...CVE-2006-3387Public exploit5.1 MediumJuly 6, 2006
vincent leclercq newsindex.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information,...CVE-2006-33865.0 MediumJuly 6, 2006
vincent leclercq newsCross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote...CVE-2006-3385Public exploit5.8 MediumJuly 6, 2006
vincent leclercq newsSQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to...CVE-2006-33845.1 MediumJuly 6, 2006
madsCross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to...CVE-2006-33835.8 MediumJuly 6, 2006
madsCross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to...CVE-2006-33824.3 MediumJuly 6, 2006
sturgeon upload uploadSturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a ...CVE-2006-3381Public exploit7.5 HighJuly 6, 2006
freestyle wikiAlgorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to...CVE-2006-33805.0 MediumJuly 6, 2006
hiki wiki wikiAlgorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5...CVE-2006-3379Fix available5.0 MediumJuly 6, 2006
ubuntu linuxpasswd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag...CVE-2006-3378Fix available7.2 HighJuly 6, 2006
jmb software autorankCross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and...CVE-2006-33774.0 MediumJuly 6, 2006
wvware libwmf, wv2 +1 moreInteger overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2...CVE-2006-3376Fix available7.5 HighJuly 6, 2006
randshopPHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows...CVE-2006-3375Public exploit7.5 HighJuly 6, 2006
randshopPHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3...CVE-2006-3374Public exploit7.5 HighJuly 6, 2006
hobbit monitor monitorUnspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users...CVE-2006-33732.1 LowJuly 6, 2006
apple safariApple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash)...CVE-2006-3372Public exploit5.0 MediumJuly 6, 2006
eupla forosEupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient...CVE-2006-33715.0 MediumJuly 6, 2006
bb-news blueboyBlueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access...CVE-2006-33705.0 MediumJuly 6, 2006
iduprey kamikaze-qscmKamikaze-QSCM 0.1 stores config.inc under the web document root with insufficient access control,...CVE-2006-33695.0 MediumJuly 6, 2006
efoneEfone 20000723 stores config.inc under the web document root with insufficient access control,...CVE-2006-33685.0 MediumJuly 6, 2006
mp3netboxMp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with...CVE-2006-33675.0 MediumJuly 6, 2006
v3 chat chatMultiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject...CVE-2006-3366Public exploit2.6 LowJuly 6, 2006
v3 chat chatV3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter...CVE-2006-33652.6 LowJuly 6, 2006
f-art agency blog cmsSQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows...CVE-2006-3364Public exploit7.5 HighJuly 6, 2006
xoops glossaire modulePHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows...CVE-2006-3363Public exploit5.1 MediumJuly 6, 2006
geeklog, toenda software development toendacms +1 moreUnrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file...CVE-2006-3362Public exploit5.1 MediumJuly 6, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open