cve.nowby Sazabi

CVEs published August 9, 2006

42 CVEs were published on August 9, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 42
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 42
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 42

CVE-2006-4040PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary…UnratedAug 9, 2006
CVE-2006-4041SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL…UnratedAug 9, 2006
CVE-2006-4042Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute…UnratedAug 9, 2006
CVE-2006-4043index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies…UnratedAug 9, 2006
CVE-2006-4044PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to…UnratedAug 9, 2006
CVE-2006-4045PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in…UnratedAug 9, 2006
CVE-2006-4046Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD…UnratedAug 9, 2006
CVE-2006-4047SQL injection vulnerability in index.php in Netious CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the…UnratedAug 9, 2006
CVE-2006-4048Netious CMS 0.4 initializes session IDs based on the client IP address, which allows remote attackers to gain access to the administration…UnratedAug 9, 2006
CVE-2006-4049Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary…UnratedAug 9, 2006
CVE-2006-3122The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service…UnratedAug 9, 2006
CVE-2006-4031MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after…UnratedAug 9, 2006
CVE-2006-4032Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from…UnratedAug 9, 2006
CVE-2006-4033Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary…UnratedAug 9, 2006
CVE-2006-4034PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute…UnratedAug 9, 2006
CVE-2006-4035SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL…UnratedAug 9, 2006
CVE-2006-4036PHP remote file inclusion vulnerability in includes/usercp_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier…UnratedAug 9, 2006
CVE-2006-4037Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafted packet.UnratedAug 9, 2006
CVE-2006-4038Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject…UnratedAug 9, 2006
CVE-2006-4039Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL…UnratedAug 9, 2006
CVE-2006-4028Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors.UnratedAug 9, 2006
CVE-2006-4029Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP…UnratedAug 9, 2006
CVE-2006-3083The (1) krshd and (2) v4rcp applications in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, when running on Linux and AIX…UnratedAug 9, 2006
CVE-2006-3084The (1) ftpd and (2) ksu programs in (a) MIT Kerberos 5 (krb5) up to 1.5, and 1.4.x before 1.4.4, and (b) Heimdal 0.7.2 and earlier, do…UnratedAug 9, 2006
CVE-2006-3979The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the…UnratedAug 9, 2006

Show all 42 entriesShow fewer entries