Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
July

CVEs published in July 2006

529 vulnerabilities, 40 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

mambo smf-forumPHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component ...CVE-2006-3773Public exploit6.8 MediumJuly 21, 2006
php-postPHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote...CVE-2006-3772Public exploitEPSS 16.8%5.1 MediumJuly 21, 2006
imaginex-resource imanage cmsMultiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and...CVE-2006-3771Public exploitEPSS 16.3%7.5 HighJuly 21, 2006
phpfaber topsitesMultiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and earlier allow...CVE-2006-37707.5 HighJuly 21, 2006
top xl xlMultiple cross-site scripting (XSS) vulnerabilities in Top XL 1.1 and earlier allow remote...CVE-2006-37692.6 LowJuly 21, 2006
darrens 5-dollar script archive osdateCross-site scripting (XSS) vulnerability in showprofile.php in Darren's $5 Script Archive osDate...CVE-2006-37676.8 MediumJuly 21, 2006
darrens 5-dollar script archive osdateDarren's $5 Script Archive osDate 1.1.7 and earlier allows users to boost their own ratings via a...CVE-2006-37665.0 MediumJuly 21, 2006
huttenlocher webdesign hwdeguestMultiple cross-site scripting (XSS) vulnerabilities in Huttenlocher Webdesign hwdeGUEST 2.1.1 and...CVE-2006-37654.3 MediumJuly 21, 2006
till gerken phppollsTill Gerken phpPolls 1.0.3 allows remote attackers to create a new poll via a direct request to...CVE-2006-37645.0 MediumJuly 21, 2006
dieselscripts diesel joke siteSQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to...CVE-2006-3763Public exploit7.5 HighJuly 21, 2006
touch control activex controlThe Touch Control ActiveX control 2.0.0.55 allows remote attackers to read and possibly execute...CVE-2006-37627.5 HighJuly 21, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard)...CVE-2006-37614.3 MediumJuly 21, 2006
mybulletinboardMultiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) 1.1.4 allow remote attackers...CVE-2006-37607.5 HighJuly 21, 2006
mybulletinboardUnspecified vulnerability in MyBB (aka MyBulletinBoard) 1.1.4, related has unspecified impact and...CVE-2006-37595.0 MediumJuly 21, 2006
mybulletinboardinc/init.php in Archive Mode (Light) in MyBB (aka MyBulletinBoard) 1.1.4 calls the extract...CVE-2006-37587.5 HighJuly 21, 2006
zen cart cartindex.php in Zen Cart 1.3.0.2 allows remote attackers to obtain sensitive information via empty ...CVE-2006-37575.0 MediumJuly 21, 2006
geeklogCross-site scripting (XSS) vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and...CVE-2006-37564.3 MediumJuly 20, 2006
flushcmsPHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2...CVE-2006-3755Public exploit7.5 HighJuly 20, 2006
flushcmsPHP remote file inclusion vulnerability in Include/editor/rich_files/class.rich.php in FlushCMS 1...CVE-2006-3754Public exploit7.5 HighJuly 20, 2006
professional home page tools guestbooksetcookie.php for the administration login in Professional Home Page Tools Guestbook records the...CVE-2006-37536.4 MediumJuly 20, 2006
professional home page tools guestbookMultiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook...CVE-2006-37527.5 HighJuly 20, 2006
htmlarea3PHP remote file inclusion vulnerability in popups/ImageManager/config.inc.php in the HTMLArea3...CVE-2006-3751Public exploit6.8 MediumJuly 20, 2006
hashcashPHP remote file inclusion vulnerability in server.php in the Hashcash Component (com_hashcash) 1...CVE-2006-3750Public exploit6.8 MediumJuly 20, 2006
mambo sitemapPHP remote file inclusion vulnerability in sitemap.xml.php in Sitemap component (com_sitemap) 2.0...CVE-2006-3749Public exploit6.8 MediumJuly 20, 2006
mamboxchange loudmouthPHP remote file inclusion vulnerability in includes/abbc/abbc.class.php in the LoudMouth...CVE-2006-3748Public exploit6.8 MediumJuly 20, 2006
swsoft plesk control panelCross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in...CVE-2006-37374.3 MediumJuly 19, 2006
mambo videodbPHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component...CVE-2006-3736Public exploit7.5 HighJuly 19, 2006
mail2forumMultiple PHP remote file inclusion vulnerabilities in Mail2Forum (module for phpBB) 1.2 and...CVE-2006-3735Public exploit5.1 MediumJuly 19, 2006
cisco cs-marsMultiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security...CVE-2006-3734Public exploit7.2 HighJuly 19, 2006
cisco security monitoring analysis and response systemjmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with...CVE-2006-3733Public exploitEPSS 12.0%7.5 HighJuly 19, 2006
cisco cs-marsCisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an...CVE-2006-37325.0 MediumJuly 19, 2006
mozilla firefoxMozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of...CVE-2006-37312.6 LowJuly 19, 2006
microsoft ie, internet explorer +1 moreInteger overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to...CVE-2006-3730Public exploitEPSS 63.6%9.3 HighJuly 19, 2006
microsoft internet explorerDataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote...CVE-2006-3729Public exploitEPSS 20.6%2.6 LowJuly 19, 2006
vmware esx, infrastructure, server +2 more +4 morevmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the...CVE-2006-35893.6 LowJuly 19, 2006
sun solaris, sunos +1 moreUnspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and...CVE-2006-37286.8 MediumJuly 19, 2006
eskolar cms cmsMultiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute...CVE-2006-3727Public exploit7.5 HighJuly 19, 2006
intervations filecopaBuffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote...CVE-2006-3726Public exploitEPSS 63.7%6.5 MediumJuly 19, 2006
symantec norton personal firewallNorton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash)...CVE-2006-37252.1 LowJuly 19, 2006
oracle enterpriseoneUnspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools...CVE-2006-372410.0 HighJuly 19, 2006
oracle peoplesoft enterpriseUnspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal...CVE-2006-372310.0 HighJuly 19, 2006
oracle peoplesoft enterpriseUnspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal...CVE-2006-372210.0 HighJuly 19, 2006
oracle enterprise managerMultiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager...CVE-2006-372110.0 HighJuly 19, 2006
oracle enterprise managerUnspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3...CVE-2006-37205.5 MediumJuly 19, 2006
oracle enterprise managerUnspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1...CVE-2006-37195.5 MediumJuly 19, 2006
oracle exchangeMultiple unspecified vulnerabilities in Oracle Exchange for Oracle E-Business Suite and...CVE-2006-371810.0 HighJuly 19, 2006
oracle e-business suiteMultiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have...CVE-2006-371710.0 HighJuly 19, 2006
oracle e-business suiteMultiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have...CVE-2006-371610.0 HighJuly 19, 2006
oracle collaboration suiteUnspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact...CVE-2006-371510.0 HighJuly 19, 2006
oracle application serverUnspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has...CVE-2006-37145.0 MediumJuly 19, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open