cve.nowby Sazabi

CVEs published August 14, 2006

42 CVEs were published on August 14, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 42
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 42
Now in CISA KEV: 0
Fix available: 2

Most affected products

rails: 2

Medium, low and unrated 42

CVE-2006-4118Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1)…UnratedAug 14, 2006
CVE-2006-4119SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the…UnratedAug 14, 2006
CVE-2006-4120Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier allows remote…UnratedAug 14, 2006
CVE-2006-4121PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to execute arbitrary PHP…UnratedAug 14, 2006
CVE-2006-4122Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id…UnratedAug 14, 2006
CVE-2006-4123PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execute arbitrary PHP…UnratedAug 14, 2006
CVE-2006-4124The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is…UnratedAug 14, 2006
CVE-2006-4125Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary code via a large…UnratedAug 14, 2006
CVE-2006-4126The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application…UnratedAug 14, 2006
CVE-2006-4127Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via…UnratedAug 14, 2006
CVE-2006-4128Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all…UnratedAug 14, 2006
CVE-2006-4129PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlier for Joomla!…UnratedAug 14, 2006
CVE-2006-4130PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo…UnratedAug 14, 2006
CVE-2006-4131Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote…UnratedAug 14, 2006
CVE-2006-4132ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service…UnratedAug 14, 2006
CVE-2006-4133Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause…UnratedAug 14, 2006
CVE-2006-4134Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows…UnratedAug 14, 2006
CVE-2006-4135PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute…UnratedAug 14, 2006
CVE-2006-4136Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors…UnratedAug 14, 2006
CVE-2006-4137IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1)…UnratedAug 14, 2006
CVE-2006-4138Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute…UnratedAug 14, 2006
CVE-2006-4139Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig…UnratedAug 14, 2006
CVE-2006-4140Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via…UnratedAug 14, 2006
CVE-2006-4141SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands…UnratedAug 14, 2006
CVE-2006-4142SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary…UnratedAug 14, 2006

Show all 42 entriesShow fewer entries