2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-3625 | — | — | 1.2% | Jul 18, 2006 | FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an... |
| CVE-2006-3624 | — | — | 1.7% | Jul 18, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web scri... |
| CVE-2006-3623 | — | — | 1.8% | Jul 18, 2006 | Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlie... |
| CVE-2006-3622 | — | — | 1.1% | Jul 18, 2006 | The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote)... |
| CVE-2006-3621 | — | — | 1.1% | Jul 18, 2006 | SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQ... |
| CVE-2006-3620 | — | — | 1.2% | Jul 18, 2006 | Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject ... |
| CVE-2006-3608 | — | — | 2.2% | Jul 18, 2006 | The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the ... |
| CVE-2006-3617 | — | — | 1.3% | Jul 18, 2006 | Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows... |
| CVE-2006-3616 | — | — | 2.4% | Jul 18, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attacker... |
| CVE-2006-3615 | — | — | 2.0% | Jul 18, 2006 | Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote atta... |
| CVE-2006-3614 | — | — | 1.2% | Jul 18, 2006 | index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, pos... |
| CVE-2006-3613 | — | — | 1.1% | Jul 18, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterpris... |
| CVE-2006-2450 | — | — | 4.3% | Jul 18, 2006 | auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifie... |
| CVE-2006-3593 | — | — | 1.0% | Jul 18, 2006 | The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwr... |
| CVE-2006-3605 | — | — | 24.3% | Jul 18, 2006 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition pro... |
| CVE-2006-3604 | — | — | 3.0% | Jul 18, 2006 | Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access r... |
| CVE-2006-3603 | — | — | 2.0% | Jul 18, 2006 | Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attacker... |
| CVE-2006-3602 | — | — | 2.7% | Jul 18, 2006 | Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers... |
| CVE-2006-3601 | — | — | 2.4% | Jul 18, 2006 | ** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows rem... |
| CVE-2006-3600 | — | — | 4.5% | Jul 18, 2006 | Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote use... |
| CVE-2006-3599 | — | — | 1.1% | Jul 18, 2006 | SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbi... |
| CVE-2006-3598 | — | — | 1.3% | Jul 18, 2006 | SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL command... |
| CVE-2006-3597 | — | — | 0.5% | Jul 18, 2006 | passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator se... |
| CVE-2006-3596 | — | — | 1.8% | Jul 18, 2006 | The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1... |
| CVE-2006-3595 | — | — | 4.2% | Jul 18, 2006 | The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require cre... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now