# CVEs published 2006-07-31 25 CVEs were published on July 31, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3941](https://cve.now/CVE-2006-3941.md): Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause a denial of service ( (no CVSS) - [CVE-2006-3942](https://cve.now/CVE-2006-3942.md): The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (sys (no CVSS) - [CVE-2006-3943](https://cve.now/CVE-2006-3943.md): Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial o (no CVSS) - [CVE-2006-3944](https://cve.now/CVE-2006-3944.md): Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2 (no CVSS) - [CVE-2006-3945](https://cve.now/CVE-2006-3945.md): The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background pr (no CVSS) - [CVE-2006-3946](https://cve.now/CVE-2006-3946.md): WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute a (no CVSS) - [CVE-2006-3933](https://cve.now/CVE-2006-3933.md): Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or (no CVSS, org.opencms:opencms-core) - [CVE-2006-3934](https://cve.now/CVE-2006-3934.md): Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download a (no CVSS, org.opencms:opencms-core) - [CVE-2006-3935](https://cve.now/CVE-2006-3935.md): system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allow (no CVSS, org.opencms:opencms-core) - [CVE-2006-3936](https://cve.now/CVE-2006-3936.md): system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary J (no CVSS, org.opencms:opencms-core) - [CVE-2006-3937](https://cve.now/CVE-2006-3937.md): post.php in x\_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail, (3 (no CVSS) - [CVE-2006-3938](https://cve.now/CVE-2006-3938.md): DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit\_cat.php, (2) index.php, (3) edit\_link.php (no CVSS) - [CVE-2006-3939](https://cve.now/CVE-2006-3939.md): ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php, whic (no CVSS) - [CVE-2006-3940](https://cve.now/CVE-2006-3940.md): Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter in (no CVSS) - [CVE-2006-3120](https://cve.now/CVE-2006-3120.md): Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) an (no CVSS) - [CVE-2006-3926](https://cve.now/CVE-2006-3926.md): Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) st (no CVSS) - [CVE-2006-3927](https://cve.now/CVE-2006-3927.md): Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2006-3928](https://cve.now/CVE-2006-3928.md): PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbitrary PHP code via a (no CVSS) - [CVE-2006-3929](https://cve.now/CVE-2006-3929.md): Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40(PT.0 (no CVSS) - [CVE-2006-3930](https://cve.now/CVE-2006-3930.md): PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote atta (no CVSS) - [CVE-2006-3931](https://cve.now/CVE-2006-3931.md): Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execute arbitrary code via (no CVSS) - [CVE-2006-3932](https://cve.now/CVE-2006-3932.md): SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat pa (no CVSS) - [CVE-2005-3618](https://cve.now/CVE-2005-3618.md): Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2 (no CVSS) - [CVE-2005-3620](https://cve.now/CVE-2005-3620.md): The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records (no CVSS) - [CVE-2006-2481](https://cve.now/CVE-2006-2481.md): VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-07-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.