Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2006

54 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-3952
    50Plan

    Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long ar

    HighCVSS 7.5WeaponizedEPSS 66%

    efs software · efs ftp serverAug 1, 2006

  • CVE-2006-3961
    40Plan

    Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home

    MediumCVSS 6.8WeaponizedEPSS 34%

    mcafee · antispywareAug 1, 2006

  • CVE-2006-3459
    46Plan

    Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow co

    HighCVSS 7.5WeaponizedEPSS 53%

    libtiff · libtiffAug 2, 2006

  • CVE-2006-3990
    36Monitor

    Multiple PHP remote file inclusion vulnerabilities in Paul M.

    HighCVSS 7.5Proof of conceptEPSS 18%

    phpsavant · savant2Aug 4, 2006

  • CVE-2006-3995
    30Monitor

    Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.ph

    MediumCVSS 6.8Proof of conceptEPSS 10%

    user home pages · user home pagesAug 4, 2006

  • CVE-2006-0395
    40Plan

    The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which a

    MediumCVSS 5.1WeaponizedEPSS 55%

    apple · mac os xAug 4, 2006

  • CVE-2006-4018
    36Monitor

    Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attacke

    HighCVSS 7.5Proof of conceptEPSS 19%

    clamav · clamavAug 8, 2006

  • CVE-2006-3450
    42Plan

    Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to

    HighCVSS 7.5No exploitEPSS 41%

    microsoft · ieAug 8, 2006

  • CVE-2006-3451
    42Plan

    Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to cons

    HighCVSS 7.5No exploitEPSS 41%

    microsoft · ieAug 8, 2006

  • CVE-2006-3637
    33Monitor

    Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted r

    MediumCVSS 5.1Proof of conceptEPSS 43%

    microsoft · ieAug 8, 2006

  • CVE-2006-3638
    41Plan

    Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial o

    HighCVSS 7.5No exploitEPSS 36%

    microsoft · ieAug 8, 2006

  • CVE-2006-3438
    41Plan

    Unspecified vulnerability in Microsoft Hyperlink Object Library (hlink.dll), possibly a buffer overflow, allows user-assisted attackers to e

    CriticalCVSS 9.3No exploitEPSS 11%

    microsoft · hyperlink object libraryAug 8, 2006

  • CVE-2006-3444
    35Monitor

    Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges v

    HighCVSS 7.5Proof of conceptEPSS 16%

    microsoft · windows 2000Aug 8, 2006

  • CVE-2006-3449
    43Plan

    Unspecified vulnerability in Microsoft PowerPoint 2000 through 2003, possibly a buffer overflow, allows user-assisted remote attackers to ex

    HighCVSS 7.5No exploitEPSS 42%

    microsoft · powerpointAug 8, 2006

  • CVE-2006-3639
    40Plan

    Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote a

    HighCVSS 7.5No exploitEPSS 32%

    microsoft · ieAug 8, 2006

  • CVE-2006-3640
    27Monitor

    Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to o

    MediumCVSS 5.0No exploitEPSS 24%

    microsoft · ieAug 8, 2006

  • CVE-2006-3643
    30Monitor

    Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedde

    MediumCVSS 6.0No exploitEPSS 21%

    microsoft · ieAug 8, 2006

  • CVE-2006-3649
    23Monitor

    Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, P

    MediumCVSS 5.1No exploitEPSS 10%

    microsoft · visual basicAug 8, 2006

  • CVE-2006-3439
    65This week

    Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including

    CriticalCVSS 10.0WeaponizedEPSS 84%

    microsoft · windows 2000Aug 8, 2006

  • CVE-2006-3440
    57Plan

    Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arb

    CriticalCVSS 10.0Proof of conceptEPSS 57%

    microsoft · windows 2000Aug 8, 2006

  • CVE-2006-3441
    59Plan

    Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to exec

    CriticalCVSS 10.0Proof of conceptEPSS 61%

    microsoft · windows 2000Aug 8, 2006

  • CVE-2006-3648
    37Monitor

    Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitr

    HighCVSS 7.6No exploitEPSS 23%

    microsoft · windows 2000Aug 8, 2006

  • CVE-2006-4046
    35Monitor

    Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow

    HighCVSS 7.5Proof of conceptEPSS 15%

    open cubic player · open cubic playerAug 9, 2006

  • CVE-2006-4052
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute ar

    HighCVSS 7.5Proof of conceptEPSS 16%

    turnkey web tools · php simple shopAug 9, 2006

  • CVE-2006-4059
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute

    HighCVSS 7.5Proof of conceptEPSS 15%

    usolved · newsolved liteAug 9, 2006

  • CVE-2006-4071
    17Monitor

    Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and po

    LowCVSS 2.6Proof of conceptEPSS 23%

    microsoft · windows 2003 serverAug 9, 2006

  • CVE-2006-4075
    25Monitor

    Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote at

    MediumCVSS 5.1Proof of conceptEPSS 17%

    wim fleischhauer · docpile weAug 10, 2006

  • CVE-2006-4089
    23Monitor

    Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application c

    MediumCVSS 5.0Proof of conceptEPSS 11%

    andy lo-a-foe · alsaplayerAug 11, 2006

  • CVE-2006-4110
    29Monitor

    Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or

    MediumCVSS 4.3Proof of conceptEPSS 39%

    apache · http serverAug 14, 2006

  • CVE-2006-4138
    36Monitor

    Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary

    HighCVSS 7.6Proof of conceptEPSS 20%

    microsoft · help file viewerAug 14, 2006

  • CVE-2006-4144
    13Monitor

    Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of servi

    LowCVSS 2.6Proof of conceptEPSS 11%

    imagemagick · imagemagickAug 15, 2006

  • CVE-2006-4159
    34Monitor

    Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via

    HighCVSS 7.5Proof of conceptEPSS 14%

    chaussette · chaussetteAug 16, 2006

  • CVE-2006-3121
    24Monitor

    The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allo

    MediumCVSS 5.0Proof of conceptEPSS 13%

    high availability linux project · heartbeatAug 16, 2006

  • CVE-2006-4193
    44Plan

    Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute ar

    HighCVSS 7.5Proof of conceptEPSS 47%

    microsoft · ieAug 16, 2006

  • CVE-2006-4197
    34Monitor

    Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow

    HighCVSS 7.5Proof of conceptEPSS 14%

    musicbrainz · libmusicbrainzAug 17, 2006

  • CVE-2006-4201
    33Monitor

    Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remo

    HighCVSS 7.5No exploitEPSS 10%

    hp · openview storage data protectorAug 17, 2006

  • CVE-2006-4208
    24Monitor

    Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticate

    MediumCVSS 5.0Proof of conceptEPSS 12%

    skippy.net · wp-db backup plugin for wordpressAug 17, 2006

  • CVE-2006-4219
    36Monitor

    The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary

    HighCVSS 7.5Proof of conceptEPSS 21%

    microsoft · ieAug 18, 2006

  • CVE-2006-4227
    30Monitor

    MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of t

    MediumCVSS 6.5Proof of conceptEPSS 13%

    mysql · mysqlAug 18, 2006

  • CVE-2006-4236
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) sho

    HighCVSS 7.5Proof of conceptEPSS 15%

    powergap · powergap businessAug 21, 2006

  • CVE-2006-4253
    35Monitor

    Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly e

    HighCVSS 7.6Proof of conceptEPSS 15%

    mozilla · firefoxAug 21, 2006

  • CVE-2006-4287
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in NES Game and NES System c108122 and earlier allow remote attackers to execute arbitrar

    HighCVSS 7.5Proof of conceptEPSS 16%

    nes game · nes gameAug 22, 2006

  • CVE-2006-3869
    43Plan

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b

    HighCVSS 7.5No exploitEPSS 43%

    microsoft · ieAug 22, 2006

  • CVE-2006-4301
    32Monitor

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple Dire

    MediumCVSS 5.0Proof of conceptEPSS 39%

    microsoft · ieAug 22, 2006

  • CVE-2006-4313
    40Plan

    Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow a

    MediumCVSS 5.0WeaponizedEPSS 12%

    cisco · vpn 3000 concentrator series softwareAug 23, 2006

  • CVE-2006-4304
    44Plan

    Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before

    CriticalCVSS 10.0No exploitEPSS 11%

    freebsd · freebsdAug 23, 2006

  • CVE-2006-4318
    45Plan

    Buffer overflow in WFTPD Server 3.23 allows remote attackers to execute arbitrary code via long SIZE commands.

    MediumCVSS 6.5WeaponizedEPSS 62%

    texas imperial software · wftpdAug 23, 2006

  • CVE-2006-3124
    36Monitor

    Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly

    HighCVSS 7.5Proof of conceptEPSS 20%

    streamripper · streamripperAug 26, 2006

  • CVE-2006-4364
    37Monitor

    Multiple heap-based buffer overflows in the POP3 server in Alt-N Technologies MDaemon before 9.0.6 allow remote attackers to cause a denial

    MediumCVSS 5.0Proof of conceptEPSS 57%

    alt-n · mdaemonAug 26, 2006

  • CVE-2006-4305
    62This week

    Buffer overflow in SAP DB and MaxDB before 7.6.00.30 allows remote attackers to execute arbitrary code via a long database name when connect

    CriticalCVSS 10.0WeaponizedEPSS 71%

    mysql · maxdbAug 29, 2006

  • CVE-2006-4446
    39Monitor

    Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote atta

    MediumCVSS 5.0Proof of conceptEPSS 62%

    microsoft · ieAug 29, 2006

  • CVE-2006-4489
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (

    HighCVSS 7.5Proof of conceptEPSS 15%

    ultrize · minibillAug 31, 2006

  • CVE-2006-4494
    37Monitor

    Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by

    HighCVSS 7.5Proof of conceptEPSS 22%

    microsoft · visual studioAug 31, 2006

  • CVE-2006-4495
    36Monitor

    Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by

    HighCVSS 7.5Proof of conceptEPSS 20%

    microsoft · ieAug 31, 2006