<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: even balance</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2006-2587: Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple produ</title><link>https://patchthecve.com/cve/CVE-2006-2587.html</link><guid>https://patchthecve.com/cve/CVE-2006-2587.html</guid><pubDate>Tue, 16 Jun 2026 22:25:22 +0000</pubDate><description>MEDIUM 5.0: Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America&#x27;s Army 1.228 and earlier, (3) Battlefield 1942 1.158 and earlier, (4) Battlefield 2 1.184 and earlier, (5) Battlefield Vietnam 1.150 and earlier, (6) Call of Duty 1</description></item><item><title>CVE-2006-0771: Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly oth</title><link>https://patchthecve.com/cve/CVE-2006-0771.html</link><guid>https://patchthecve.com/cve/CVE-2006-0771.html</guid><pubDate>Tue, 16 Jun 2026 22:21:15 +0000</pubDate><description>MEDIUM 6.4: Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly </description></item><item><title>CVE-2004-2340: ** UNVERIFIABLE **  SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remot</title><link>https://patchthecve.com/cve/CVE-2004-2340.html</link><guid>https://patchthecve.com/cve/CVE-2004-2340.html</guid><pubDate>Tue, 16 Jun 2026 22:09:28 +0000</pubDate><description>HIGH 7.5: ** UNVERIFIABLE **  SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form.  NOTE: the original vulnerability report contains several significant inconsistencies th</description></item></channel></rss>