Marc Schoenefeld Sun Java Runtime Environment 1.3/1.4/1.5 - Nested Array Objects Denial of Service
dos multiple

Federico L. Bossi Bonin portmap 5 Beta - 'Set/Dump' Local Denial of Service
dos linux OSVDB-26322

X0r_1 Fusion News 1.0 (fil_config) - Remote File Inclusion
webapps php OSVDB-34450;CVE-2006-3387

rgod XOOPS 2.0.13.2 - 'xoopsOption[nocommon]' Remote Command Execution
webapps php OSVDB-25683;CVE-2006-2516

Kacper CaLogic Calendars 1.2.2 - 'CLPath' Remote File Inclusion
webapps php OSVDB-31614;CVE-2006-2570;OSVDB-31613

omnipresent CodeAvalanche News 1.2 - 'default.asp' SQL Injection
webapps asp CVE-2006-2499;OSVDB-25652

FarhadKey Zix Forum 1.12 - 'layid' SQL Injection
webapps asp OSVDB-25707;CVE-2006-2541

LiNuX_rOOt Open Wiki 0.78 - 'ow.asp' Cross-Site Scripting
webapps asp CVE-2006-2473;OSVDB-25836

Yunus Emre Yilmaz BoastMachine 3.1 - 'admin.php' Cross-Site Scripting
webapps php CVE-2006-2491;OSVDB-25617

Luigi Auriemma libextractor 0.5.13 - Multiple Heap Overflows (PoC)
dos multiple OSVDB-25664;CVE-2006-2458;OSVDB-25663

Kacper ScozNews 1.2.1 - 'mainpath' Remote File Inclusion
webapps php OSVDB-25616;CVE-2006-2487

Joseph Pierini Caucho Resin 3.0.17/3.0.18 - Viewfile Information Disclosure
webapps java CVE-2006-2437;OSVDB-25571

rgod DeluxeBB 1.06 - 'Attachment mod_mime' Remote Command Execution
webapps php OSVDB-25560;CVE-2006-4558

rgod PHP-Fusion 6.00.306 - 'srch_where' SQL Injection
webapps php OSVDB-25542;CVE-2006-2459

redsand RealVNC 4.1.0 < 4.1.1 - VNC Null Authentication Bypass
remote multiple 5900 OSVDB-25479;CVE-2006-2369

LoK-Crew Confixx 3.0/3.1 - 'index.php' Cross-Site Scripting
webapps php CVE-2006-2423;OSVDB-25525