2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-3444 | — | — | 16.4% | Aug 9, 2006 | Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to... |
| CVE-2006-3639 | — | — | 31.4% | Aug 9, 2006 | Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, w... |
| CVE-2006-3640 | — | — | 24.9% | Aug 9, 2006 | Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows r... |
| CVE-2006-3643 | — | — | 19.7% | Aug 9, 2006 | Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to... |
| CVE-2006-3649 | — | — | 10.1% | Aug 9, 2006 | Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 S... |
| CVE-2006-4023 | — | — | 1.7% | Aug 9, 2006 | The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP... |
| CVE-2006-4025 | — | — | 1.2% | Aug 9, 2006 | SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arb... |
| CVE-2006-4026 | — | — | 3.5% | Aug 9, 2006 | PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a... |
| CVE-2006-4022 | — | — | 0.4% | Aug 9, 2006 | Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execute... |
| CVE-2006-4024 | — | — | 4.9% | Aug 9, 2006 | The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial... |
| CVE-2006-3450 | — | — | 39.2% | Aug 8, 2006 | Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Jav... |
| CVE-2006-3451 | — | — | 39.3% | Aug 8, 2006 | Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets... |
| CVE-2006-3583 | — | — | 1.7% | Aug 8, 2006 | Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link a... |
| CVE-2006-3585 | — | — | 1.6% | Aug 8, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web... |
| CVE-2006-3637 | — | — | 43.7% | Aug 8, 2006 | Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which al... |
| CVE-2006-3638 | — | — | 35.0% | Aug 8, 2006 | Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers... |
| CVE-2006-3584 | — | — | 1.5% | Aug 8, 2006 | Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite config... |
| CVE-2006-3586 | — | — | 1.3% | Aug 8, 2006 | SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) ... |
| CVE-2006-3114 | — | — | 0.4% | Aug 8, 2006 | PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local ... |
| CVE-2006-3853 | — | — | 3.9% | Aug 8, 2006 | Buffer overflow in IBM Informix Dynamic Server (IDS) before 9.40.TC7 and 10.00 before 10.00.TC3, when running on Windows... |
| CVE-2006-3855 | — | — | 1.8% | Aug 8, 2006 | The ifx_load_internal function in IBM Informix Dynamic Server (IDS) allows remote authenticated users to execute arbitra... |
| CVE-2006-3856 | — | — | 0.4% | Aug 8, 2006 | IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows local users to cause a denial of ser... |
| CVE-2006-3857 | — | — | 3.6% | Aug 8, 2006 | Multiple buffer overflows in IBM Informix Dynamic Server (IDS) before 9.40.TC6 and 10.00 before 10.00.TC3 allow remote a... |
| CVE-2006-3858 | — | — | 0.6% | Aug 8, 2006 | IBM Informix Dynamic Server (IDS) before 9.40.xC8 and 10.00 before 10.00.xC4 stores passwords in plaintext in shared mem... |
| CVE-2006-3861 | — | — | 1.4% | Aug 8, 2006 | IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 does not use database creation permissions,... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now