Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2006

65 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-3340
    25Monitor

    Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote a

    MediumCVSS 5.1Proof of conceptEPSS 15%

    pearlinger · pearl for mamboJul 3, 2006

  • CVE-2006-3354
    25Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Record

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · ieJul 5, 2006

  • CVE-2006-3357
    41Plan

    Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a d

    HighCVSS 7.5No exploitEPSS 35%

    microsoft · internet explorerJul 6, 2006

  • CVE-2006-3392
    44Plan

    Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read ar

    MediumCVSS 5.0WeaponizedEPSS 79%

    usermin · userminJul 6, 2006

  • CVE-2006-3427
    27Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL attribute on an uninit

    MediumCVSS 5.0Proof of conceptEPSS 24%

    microsoft · internet explorerJul 6, 2006

  • CVE-2006-3431
    38Monitor

    Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arbitrary code via a cr

    HighCVSS 7.5Proof of conceptEPSS 28%

    microsoft · excelJul 7, 2006

  • CVE-2006-3471
    26Monitor

    Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table with a frameset as a ch

    MediumCVSS 5.0Proof of conceptEPSS 20%

    microsoft · ieJul 10, 2006

  • CVE-2006-3472
    23Monitor

    Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with an A tag containing a

    MediumCVSS 5.0Proof of conceptEPSS 10%

    microsoft · ieJul 10, 2006

  • CVE-2006-3493
    32Monitor

    Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other products in Microso

    MediumCVSS 5.1Proof of conceptEPSS 40%

    microsoft · officeJul 10, 2006

  • CVE-2006-0007
    43Plan

    Buffer overflow in GIFIMP32.FLT, as used in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows us

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · officeJul 11, 2006

  • CVE-2006-0033
    42Plan

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted att

    CriticalCVSS 9.3No exploitEPSS 15%

    microsoft · officeJul 11, 2006

  • CVE-2006-1300
    31Monitor

    Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to b

    MediumCVSS 5.0No exploitEPSS 36%

    microsoft · .net frameworkJul 11, 2006

  • CVE-2006-1314
    48Plan

    Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and

    HighCVSS 7.5Proof of conceptEPSS 61%

    microsoft · windows 2000Jul 11, 2006

  • CVE-2006-1315
    35Monitor

    The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote

    MediumCVSS 5.0Proof of conceptEPSS 48%

    microsoft · server serviceJul 11, 2006

  • CVE-2006-1316
    42Plan

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted att

    CriticalCVSS 9.3No exploitEPSS 15%

    microsoft · officeJul 11, 2006

  • CVE-2006-2372
    67This week

    Buffer overflow in the DHCP Client service for Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 allows remote a

    CriticalCVSS 10.0Proof of conceptEPSS 90%

    microsoft · dhcp client serviceJul 11, 2006

  • CVE-2006-2389
    49Plan

    Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted att

    CriticalCVSS 9.3Proof of conceptEPSS 38%

    microsoft · officeJul 11, 2006

  • CVE-2006-0026
    53Plan

    Buffer overflow in Microsoft Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows local and possibly remote attackers to execute arb

    MediumCVSS 6.5Proof of conceptEPSS 89%

    microsoft · internet information serverJul 11, 2006

  • CVE-2006-3510
    14Monitor

    The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial

    LowCVSS 2.6Proof of conceptEPSS 14%

    microsoft · ieJul 11, 2006

  • CVE-2006-3511
    26Monitor

    Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the Html

    MediumCVSS 5.0Proof of conceptEPSS 21%

    microsoft · internet explorerJul 11, 2006

  • CVE-2006-3512
    27Monitor

    Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilte

    MediumCVSS 5.0Proof of conceptEPSS 24%

    microsoft · internet explorerJul 11, 2006

  • CVE-2006-3513
    27Monitor

    danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data pr

    MediumCVSS 5.0Proof of conceptEPSS 22%

    microsoft · ieJul 11, 2006

  • CVE-2006-3524
    50Plan

    Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field valu

    HighCVSS 7.5WeaponizedEPSS 67%

    sipfoundry · sipxtapiJul 11, 2006

  • CVE-2006-3545
    24Monitor

    Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web page with multiple e

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · internet explorerJul 12, 2006

  • CVE-2006-3581
    24Monitor

    Multiple stack-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via

    MediumCVSS 5.1Proof of conceptEPSS 13%

    audacious media player team · adplugJul 13, 2006

  • CVE-2006-1302
    41Plan

    Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain c

    CriticalCVSS 9.3No exploitEPSS 13%

    microsoft · excelJul 13, 2006

  • CVE-2006-1304
    40Plan

    Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted

    CriticalCVSS 9.3No exploitEPSS 10%

    microsoft · excelJul 13, 2006

  • CVE-2006-2388
    40Plan

    Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to

    CriticalCVSS 9.3No exploitEPSS 10%

    microsoft · excelJul 13, 2006

  • CVE-2006-3590
    24Monitor

    mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed sha

    MediumCVSS 5.1No exploitEPSS 14%

    microsoft · powerpointJul 14, 2006

  • CVE-2006-3591
    28Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a Tr

    MediumCVSS 5.0Proof of conceptEPSS 26%

    microsoft · internet explorerJul 18, 2006

  • CVE-2006-3605
    27Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitia

    MediumCVSS 5.0Proof of conceptEPSS 24%

    microsoft · internet explorerJul 18, 2006

  • CVE-2006-3652
    36Monitor

    Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · isa serverJul 18, 2006

  • CVE-2006-3653
    14Monitor

    wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via c

    LowCVSS 2.6Proof of conceptEPSS 14%

    microsoft · worksJul 18, 2006

  • CVE-2006-3654
    24Monitor

    Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumpt

    LowCVSS 2.6No exploitEPSS 47%

    microsoft · worksJul 18, 2006

  • CVE-2006-3655
    26Monitor

    Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted Pow

    MediumCVSS 5.1Proof of conceptEPSS 20%

    microsoft · powerpointJul 18, 2006

  • CVE-2006-3656
    16Monitor

    Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint fi

    LowCVSS 2.6Proof of conceptEPSS 20%

    microsoft · powerpointJul 18, 2006

  • CVE-2006-3657
    25Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microso

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · ieJul 18, 2006

  • CVE-2006-3658
    24Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderIte

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · ieJul 18, 2006

  • CVE-2006-3659
    24Monitor

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTM

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · ieJul 18, 2006

  • CVE-2006-3660
    35Monitor

    Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe.

    HighCVSS 7.6Proof of conceptEPSS 18%

    microsoft · powerpointJul 18, 2006

  • CVE-2006-3668
    33Monitor

    Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS

    HighCVSS 7.6Proof of conceptEPSS 10%

    dynamic universal music bibliotheque · dumbJul 18, 2006

  • CVE-2006-3468
    36Monitor

    Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP

    HighCVSS 7.8Proof of conceptEPSS 15%

    linux · linux kernelJul 21, 2006

  • CVE-2006-3469
    25Monitor

    Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to ca

    MediumCVSS 4.0Proof of conceptEPSS 28%

    mysql · mysqlJul 21, 2006

  • CVE-2006-3687
    36Monitor

    Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784,

    HighCVSS 7.5Proof of conceptEPSS 19%

    d-link · di-604 broadband routerJul 21, 2006

  • CVE-2006-3726
    45Plan

    Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary co

    MediumCVSS 6.5WeaponizedEPSS 63%

    intervations · filecopaJul 21, 2006

  • CVE-2006-3729
    16Monitor

    DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash

    LowCVSS 2.6Proof of conceptEPSS 20%

    microsoft · internet explorerJul 21, 2006

  • CVE-2006-3730
    54Plan

    Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute

    HighCVSS 8.8WeaponizedEPSS 63%

    microsoft · ieJul 21, 2006

  • CVE-2006-3733
    34Monitor

    jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Resp

    HighCVSS 7.5Proof of conceptEPSS 11%

    cisco · security monitoring analysis and response systemJul 21, 2006

  • CVE-2006-3771
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbi

    HighCVSS 7.5Proof of conceptEPSS 16%

    imaginex-resource · imanage cmsJul 24, 2006

  • CVE-2006-3772
    25Monitor

    PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions an

    MediumCVSS 5.1Proof of conceptEPSS 16%

    php-post · php-postJul 24, 2006

  • CVE-2006-3835
    34Monitor

    Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension,

    MediumCVSS 5.0Proof of conceptEPSS 46%

    apache · tomcatJul 25, 2006

  • CVE-2006-3838
    62This week

    Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Side

    CriticalCVSS 10.0WeaponizedEPSS 73%

    eiqnetworks · enterprise security analyzerJul 26, 2006

  • CVE-2006-3880
    27Monitor

    Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of servi

    MediumCVSS 5.0Proof of conceptEPSS 24%

    microsoft · windows 2000Jul 26, 2006

  • CVE-2006-3897
    27Monitor

    Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by

    MediumCVSS 5.0Proof of conceptEPSS 23%

    microsoft · internet explorerJul 27, 2006

  • CVE-2006-3898
    27Monitor

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Cl

    MediumCVSS 5.0Proof of conceptEPSS 24%

    microsoft · internet explorerJul 27, 2006

  • CVE-2006-3899
    27Monitor

    Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the st

    MediumCVSS 5.0Proof of conceptEPSS 24%

    microsoft · internet explorerJul 27, 2006

  • CVE-2006-3677
    54Plan

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properti

    HighCVSS 7.5WeaponizedEPSS 78%

    mozilla · firefoxJul 27, 2006

  • CVE-2006-3910
    25Monitor

    Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling th

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · ieJul 27, 2006

  • CVE-2006-3911
    35Monitor

    PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a

    HighCVSS 7.5Proof of conceptEPSS 16%

    php live · php liveJul 27, 2006

  • CVE-2006-3915
    26Monitor

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native fu

    MediumCVSS 5.0Proof of conceptEPSS 21%

    microsoft · internet explorerJul 27, 2006

  • CVE-2006-3918
    46Plan

    http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before

    MediumCVSS 4.3Proof of conceptEPSS 95%

    apache · http serverJul 27, 2006

  • CVE-2006-3747
    59Plan

    Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before

    HighCVSS 7.6WeaponizedEPSS 96%

    apache · http serverJul 28, 2006

  • CVE-2006-3942
    54Plan

    The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (sys

    HighCVSS 7.8WeaponizedEPSS 75%

    microsoft · windows 2000Jul 31, 2006

  • CVE-2006-3943
    15Monitor

    Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial o

    LowCVSS 2.6Proof of conceptEPSS 15%

    microsoft · ieJul 31, 2006

  • CVE-2006-3944
    25Monitor

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2

    MediumCVSS 5.0Proof of conceptEPSS 17%

    microsoft · ieJul 31, 2006