CVEs published in August 2006
538 vulnerabilities, 22 critical, 0 exploited.
- joomla x-shop component** DISPUTED ** PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop...7.5 High
- devellion cubecartMultiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.11 and earlier allow remote...6.8 Medium
- devellion cubecartMultiple SQL injection vulnerabilities in CubeCart 3.0.11 and earlier allow remote attackers to...7.5 High
- symantec norton personal firewallSymantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect...3.6 Low
- kaspersky lab anti-hackerKaspersky Anti-Hacker 1.8.180, when Stealth Mode is enabled, allows remote attackers to obtain...5.0 Medium
- mambo mtg myhomepage component** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the lmtg_myhomepage...7.5 High
- product scroller module scroller moduleMultiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreLinux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows...4.9 Medium
- jake olefsky fotopholderDirectory traversal vulnerability in index.php in Fotopholder 1.8 allows remote attackers to read...5.0 Medium
- jake olefsky fotopholderCross-site scripting (XSS) vulnerability in index.php in Fotopholder 1.8 allows remote attackers...2.6 Low
- john hanna anti-spam smtp proxy serverAbsolute path traversal vulnerability in the get functionality in Anti-Spam SMTP Proxy (ASSP)...4.0 Medium
- ibm db2IBM DB2 Universal Database (UDB) before 8.1 FixPak 13 allows remote authenticated users to cause...4.0 Medium
- horde application frameworkindex.php in Horde Application Framework before 3.1.2 allows remote attackers to include web...4.3 Medium
- horde, horde imp +1 moreCross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3...4.3 Medium
- ibm aixUnspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain...7.5 High
- k-meleon project k-meleon, mozilla firefox, netscape navigator +2 moreConcurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause...7.6 High
- linux kernelThe Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local...4.9 Medium
- apple mac os x, xsan, mac os x server +2 moreBuffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows...4.6 Medium
- joomla jim instant messaging componentPHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla...5.1 Medium
- mamboxchange reporterPHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo...7.5 High
- fusionphp fusion newsPHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers...7.5 High
- outreach project tool opt maxPHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max...7.5 High
- wtcom web torrentSQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote...7.5 High
- invisionix systems roaming system remotePHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System...7.5 High
- powergap business, lite +1 moreMultiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute...7.5 High
- sony sonicstage mastering studioBuffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00...7.5 High
- aolAOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure...7.2 High
- dotprojectPHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and...7.5 High
- globus toolkitGlobus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive...3.6 Low
- globus toolkitRace condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before...1.2 Low
- irfanviewIrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application...2.6 Low
- lizge web portalMultiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow...7.5 High
- joomla moslistmessenger componentPHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm)...7.5 High
- symantec veritas netbackup puredisk remote office editionSymantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote...9.0 High
- mysqlMySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security...6.5 Medium
- mysqlMySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive...3.6 Low
- vwar virtual warCross-site scripting (XSS) vulnerability in calendar.php in Virtual War (VWar) 1.5.0 and earlier...4.3 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to...5.0 Medium
- ibm websphere application serverMultiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have...5.0 Medium
- ibm egathererStack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284...9.3 High
- microsoft ieThe Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of...7.5 High
- zen cart cartDirectory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to...7.5 High
- webinsta cmsPHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1...7.5 High
- zen cart cartPHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when...5.1 Medium
- zen cart cartMultiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to...7.5 High
- david kent norman thatwarePHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and...7.5 High
- b0zz and chris vincent owl intranet engineSQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows...7.5 High
- b0zz and chris vincent owl intranet engineCross-site scripting (XSS) vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and...4.3 Medium
- andreas kansok phpaynu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows...2.6 Low
- webinsta mailing list managerPHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e...7.5 High
- Show moreLoading…