CVEs published in August 2006
538 vulnerabilities, 22 critical, 0 exploited.
- phpgroupwareDirectory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9...6.4 Medium
- phpecardPHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 and earlier allows remote...7.5 High
- phpecardPHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows...7.5 High
- sql-ledgerSQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger...7.5 High
- xchat** DISPUTED ** Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to...5.0 Medium
- hlstatsCross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers...4.3 Medium
- pmwikiCross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to...4.3 Medium
- web3king web3newsPHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95...7.5 High
- cj design tag boardDirect static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute...7.5 High
- phpbb group phpbbusercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to...5.1 Medium
- mybulletinboardCross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and...5.1 Medium
- interact learning community environment interactMultiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is...5.1 Medium
- x.org xdm, xf86dga, xinit +6 more +8 moreX.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not...7.2 High
- microsoft ieHeap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft...5.0 Medium
- mysql maxdb, sap-db +1 moreBuffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary...10.0 High
- gtetrinetArray index error in tetrinet.c in gtetrinet 0.7.8 and earlier allows remote attackers to execute...7.5 High
- cutephp cutenews** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote...7.5 High
- cybozu garoonMultiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote...6.5 Medium
- alstrasoft video share enterprisePHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise...7.5 High
- clemens wacha php iaddressbookCross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers...6.8 Medium
- ay system solutions cmsMultiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier...7.5 High
- ay system solutions cmsPHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier...7.5 High
- sun solarispkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory...3.6 Low
- openbsdisakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA)...5.0 Medium
- openbsdOpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a...4.9 Medium
- sendmailUse-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial...7.5 High
- phpPHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier ...7.5 High
- zend platformDirectory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to...7.5 High
- zend platformMultiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod_cluster module in...7.5 High
- cisco network admission control, network admission control manager and server system software +1 moreThe Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent...5.0 Medium
- phlymail lite** DISPUTED ** PHP remote file inclusion vulnerability in handlers/email/mod.output.php in...7.5 High
- jupiter cms cms** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows...7.5 High
- efictionindex.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain...5.1 Medium
- albert albert-easysitePHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php...5.1 Medium
- coinsoft technologies phpcoinMultiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to...5.1 Medium
- coinsoft technologies phpcoinPHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows...5.1 Medium
- bigaceMultiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to...7.5 High
- jetbox cms** DISPUTED ** PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function...7.5 High
- yapigCross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another...4.3 Medium
- phaosDirectory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to...5.0 Medium
- promanagerSQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute...7.5 High
- wikepageDirectory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote...4.0 Medium
- xoopsSQL injection vulnerability in edituser.php in Xoops before 2.0.15 allows remote attackers to...7.5 High
- ibm aixUntrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users...7.2 High
- mysqlMySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave...2.1 Low
- streamripperBuffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers...7.5 High
- joomla rssxt component** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for...7.5 High
- guder und koch netzwerktechnik eichhorn portalMultiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow...7.5 High
- guder und koch netzwerktechnik eichhorn portalMultiple cross-site scripting (XSS) vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn...5.1 Medium
- mambo contacts xtd component** DISPUTED ** PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD ...7.5 High
- Show moreLoading…