cve.nowby Sazabi

CVEs published July 31, 2006

25 CVEs were published on July 31, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 25
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 25
Now in CISA KEV: 0
Fix available: 4

Most affected products

org.opencms:opencms-core: 4

Medium, low and unrated 25

CVE-2006-3941Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause a denial of service…UnratedJul 31, 2006
CVE-2006-3942The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service…UnratedJul 31, 2006
CVE-2006-3943Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial…UnratedJul 31, 2006
CVE-2006-3944Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or…UnratedJul 31, 2006
CVE-2006-3945The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background…UnratedJul 31, 2006
CVE-2006-3946WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute…UnratedJul 31, 2006
CVE-2006-3933Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script…org.opencms:opencms-coreUnratedFix availableJul 31, 2006
CVE-2006-3934Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download…org.opencms:opencms-coreUnratedFix availableJul 31, 2006
CVE-2006-3935system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which…org.opencms:opencms-coreUnratedFix availableJul 31, 2006
CVE-2006-3936system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary…org.opencms:opencms-coreUnratedFix availableJul 31, 2006
CVE-2006-3937post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail…UnratedJul 31, 2006
CVE-2006-3938DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.php, (3)…UnratedJul 31, 2006
CVE-2006-3939ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php…UnratedJul 31, 2006
CVE-2006-3940Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter…UnratedJul 31, 2006
CVE-2006-3120Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash)…UnratedJul 31, 2006
CVE-2006-3926Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2)…UnratedJul 31, 2006
CVE-2006-3927Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or…UnratedJul 31, 2006
CVE-2006-3928PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbitrary PHP code via…UnratedJul 31, 2006
CVE-2006-3929Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware…UnratedJul 31, 2006
CVE-2006-3930PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote…UnratedJul 31, 2006
CVE-2006-3931Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execute arbitrary code…UnratedJul 31, 2006
CVE-2006-3932SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat…UnratedJul 31, 2006
CVE-2005-3618Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before…UnratedJul 31, 2006
CVE-2005-3620The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2…UnratedJul 31, 2006
CVE-2006-2481VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the…UnratedJul 31, 2006