Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
July

CVEs published in July 2006

529 vulnerabilities, 40 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

professional home page tools guestbookdelcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie...CVE-2006-38375.0 MediumJuly 25, 2006
unidomedia chameleon leDirectory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and...CVE-2006-3836Public exploit5.0 MediumJuly 25, 2006
apache tomcatApache Tomcat Reveals DirectoriesCVE-2006-3835Public exploitFix availableEPSS 48.1%5.0 MediumJuly 25, 2006
ej3 topoEJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows...CVE-2006-38345.0 MediumJuly 25, 2006
ej3 topoindex.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish...CVE-2006-38335.0 MediumJuly 25, 2006
gerrit van aaken loudblogSQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows...CVE-2006-3832Public exploit7.5 HighJuly 25, 2006
kailash nadh boastmachineThe Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses...CVE-2006-38315.0 MediumJuly 25, 2006
kailash nadh boastmachineThe Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3...CVE-2006-38304.0 MediumJuly 25, 2006
kailash nadh boastmachineCross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine ...CVE-2006-38295.0 MediumJuly 25, 2006
kailash nadh boastmachineIncomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and...CVE-2006-38286.5 MediumJuly 25, 2006
kailash nadh boastmachineSQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine ...CVE-2006-38276.5 MediumJuly 25, 2006
kailash nadh boastmachineMultiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly...CVE-2006-38264.3 MediumJuly 25, 2006
sun solarisThe IPv4 implementation in Sun Solaris 10 before 20060721 allows local users to select routes...CVE-2006-38252.1 LowJuly 25, 2006
sun solarissysteminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count...CVE-2006-3824Public exploit4.9 MediumJuly 25, 2006
geodesicsolutions geoauctions premier, geoclassifieds basic +1 moreSQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and ...CVE-2006-3823Public exploit5.1 MediumJuly 25, 2006
geodesicsolutions geoauctions enterpriseSQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows...CVE-2006-3822Public exploit5.1 MediumJuly 25, 2006
adaptive technology resource centre atutorMultiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to...CVE-2006-38214.3 MediumJuly 25, 2006
gerrit van aaken loudblogCross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows...CVE-2006-38204.3 MediumJuly 25, 2006
krusaderKrusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the...CVE-2006-38167.5 HighJuly 24, 2006
linux-ha heartbeatheartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared...CVE-2006-3815Public exploitFix available2.1 LowJuly 24, 2006
cheese tracker trackerBuffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese...CVE-2006-3814Public exploitFix available5.1 MediumJuly 24, 2006
fbiThe fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter...CVE-2006-3119Fix available5.1 MediumJuly 24, 2006
amazing flash commerce afcommerce shopping cartCross-site scripting (XSS) vulnerability in Amazing Flash AFCommerce Shopping Cart allows remote...CVE-2006-38004.3 MediumJuly 21, 2006
deluxebbDeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms...CVE-2006-37997.5 HighJuly 21, 2006
deluxebbDeluxeBB 1.07 and earlier allows remote attackers to overwrite the (1) _GET, (2) _POST, (3) _ENV,...CVE-2006-37985.0 MediumJuly 21, 2006
deluxebbSQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass...CVE-2006-37977.5 HighJuly 21, 2006
deluxebbDeluxeBB 1.07 and earlier does not properly handle a username composed of a single space...CVE-2006-37967.5 HighJuly 21, 2006
deluxebbMultiple cross-site scripting (XSS) vulnerabilities in DeluxeBB before 1.08 allow remote...CVE-2006-37952.6 LowJuly 21, 2006
amazing flash commerce afcommerce shopping cart** DISPUTED ** SQL injection vulnerability in Amazing Flash AFCommerce Shopping Cart allows...CVE-2006-3794Disputed7.5 HighJuly 21, 2006
sitedepth cmsPHP remote file inclusion vulnerability in constants.php in SiteDepth CMS 3.01 and earlier allows...CVE-2006-3793Public exploit5.1 MediumJuly 21, 2006
ufo2000SQL injection vulnerability in ServerClientUfo::recv_packet in server_protocol.cpp in UFO2000 svn...CVE-2006-37927.5 HighJuly 21, 2006
ufo2000The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote...CVE-2006-37915.0 MediumJuly 21, 2006
ufo2000The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote...CVE-2006-37905.0 MediumJuly 21, 2006
ufo2000Multiple array index errors in the (1) recv_rules, (2) recv_select_unit, (3) recv_options, and (4...CVE-2006-37897.5 HighJuly 21, 2006
ufo2000Multiple buffer overflows in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute...CVE-2006-37887.5 HighJuly 21, 2006
kerio personal firewallkpf4ss.exe in Sunbelt Kerio Personal Firewall 4.3.x before 4.3.268 does not properly hook the...CVE-2006-3787Public exploit2.1 LowJuly 21, 2006
symantec pcanywhereSymantec pcAnywhere 12.5 uses weak integrity protection for .cif (aka caller or CallerID) files,...CVE-2006-37863.6 LowJuly 21, 2006
symantec pcanywhereSymantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not...CVE-2006-37852.1 LowJuly 21, 2006
symantec pcanywhereSymantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder...CVE-2006-37847.2 HighJuly 21, 2006
sun solarisSun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors...CVE-2006-37834.9 MediumJuly 21, 2006
sun solarisUnspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86,...CVE-2006-37824.9 MediumJuly 21, 2006
sun solarisUnspecified vulnerability in Sun Solaris 10 allows context-dependent attackers to cause a denial...CVE-2006-37817.8 HighJuly 21, 2006
keyifweb keyif portalKeyifweb Keyif Portal 2.0 stores sensitive information under the web root with insufficient...CVE-2006-37805.0 MediumJuly 21, 2006
citrix metaframe, metaframe presentation server, presentation server +2 moreCitrix MetaFrame up to XP 1.0 Feature 1, except when running on Windows Server 2003, installs a...CVE-2006-37796.5 MediumJuly 21, 2006
ibm lotus notesIBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with...CVE-2006-37785.0 MediumJuly 21, 2006
idevspot phplinkexchangePHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows...CVE-2006-3777Public exploit7.5 HighJuly 21, 2006
idevspot autohost, phphostbot +1 morePHP remote file inclusion vulnerability in order/index.php in IDevSpot (1) PhpHostBot 1.0 and (2)...CVE-2006-3776Public exploit7.5 HighJuly 21, 2006
mybulletinboardSQL injection vulnerability in the init function in class_session.php in MyBB (aka...CVE-2006-3775Public exploit7.5 HighJuly 21, 2006
planet concept planetgalleryadmin/gallery_admin.php in planetGallery before 14.07.2006 allows remote attackers to execute...CVE-2006-36765.1 MediumJuly 21, 2006
joomla performs componentPHP remote file inclusion vulnerability in performs.php in the perForms component (com_performs)...CVE-2006-3774Public exploit6.8 MediumJuly 21, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open