CVEs published in July 2006
529 vulnerabilities, 40 critical, 0 exploited.
- microsoft officeBuffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3,...9.3 High
- vastal i-tech buddy zoneMultiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to...6.8 Medium
- microsoft officeBuffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft...5.1 Medium
- micoThe CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and...5.0 Medium
- christophe thibault kailleraStack-based buffer overflow in Kaillera Server 0.86 and earlier allows remote attackers to...7.5 High
- f-secure anti-virus, internet security, service platform for service providers +2 moreF-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006,...5.0 Medium
- f-secure anti-virus, internet security, service platform for service providers +2 moreF-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006,...5.0 Medium
- virtuastoreAbsolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote...5.0 Medium
- virtuastoreVirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which...5.0 Medium
- mysql** DISPUTED ** Off-by-one buffer overflow in the Instance_options::complete_initialization...2.1 Low
- astrodog press some chessMultiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow...7.5 High
- adaptive technology resource centre atutorMultiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers...2.6 Low
- phpmaillistPHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient...5.0 Medium
- phpmaillistCross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows...2.6 Low
- joomlaMultiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute...7.5 High
- joomlaMultiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote...5.8 Medium
- nuked-klanCross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block...5.0 Medium
- myphp cms cmsPHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and...7.5 High
- stalker communigateUnspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows...5.0 Medium
- phpwebgalleryCross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and...4.3 Medium
- free qboard qboardMultiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to...7.5 High
- belchior foundry vcardMultiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to...7.5 High
- drupal form mail moduleCRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to...7.5 High
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service...5.0 Medium
- microsoft ieMicrosoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service ...5.0 Medium
- dell openmanage cdThe Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which...7.5 High
- linux kernelThe ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly...7.8 High
- qbik wingateDirectory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and...5.5 Medium
- ebay enhanced picture servicesBuffer overflow in eBay Enhanced Picture Services (aka EPUImageControl Class) in EUPWALcontrol...7.5 High
- zopeZope allows local users to read arbitrary files2.1 Low
- microsoft excelBuffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted...7.5 High
- linux kernelThe suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16...4.6 Medium
- lumension patchlink update server, novell zenworks +1 moreSQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1...7.5 High
- tigertom scripts ttcalc scriptCross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject...4.3 Medium
- tigertom scripts ttcalc scriptCross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject...4.3 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by...5.0 Medium
- lumension patchlink update server, novell zenworks +1 moreDirectory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x...5.0 Medium
- lumension patchlink update server, novell zenworks +1 moreFastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and ...7.5 High
- webex communications downloader activex controlMultiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before...7.5 High
- webex communications downloader java, downloader activexcontrol +1 moreWebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate...9.3 High
- wonderedit pro cmsPHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute...7.5 High
- smartsitecmsPHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is...5.1 Medium
- mybulletinboardCross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before...7.5 High
- torTor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of...5.0 Medium
- torTor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its...5.0 Medium
- torTor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could...6.4 Medium
- tor** DISPUTED ** Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay...5.0 Medium
- torTor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote...6.4 Medium
- torTor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses,...5.0 Medium
- torThe privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via...5.0 Medium
- Show moreLoading…