2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-3431 | — | — | 28.3% | Jul 7, 2006 | Buffer overflow in certain Asian language versions of Microsoft Excel might allow user-assisted attackers to execute arb... |
| CVE-2006-2451 | — | — | 4.4% | Jul 7, 2006 | The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a l... |
| CVE-2006-3410 | — | — | 1.6% | Jul 7, 2006 | Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows rem... |
| CVE-2006-3408 | — | — | 1.8% | Jul 7, 2006 | Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause an... |
| CVE-2006-3407 | — | — | 1.5% | Jul 7, 2006 | Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-pri... |
| CVE-2006-3406 | — | — | 1.4% | Jul 7, 2006 | Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files v... |
| CVE-2006-3430 | — | — | 1.8% | Jul 7, 2006 | SQL injection vulnerability in checkprofile.asp in (1) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2... |
| CVE-2006-3429 | — | — | 1.2% | Jul 7, 2006 | Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script o... |
| CVE-2006-3428 | — | — | 1.3% | Jul 7, 2006 | Cross-site scripting (XSS) vulnerability in TigerTom TTCalc 1.0 allows remote attackers to inject arbitrary web script o... |
| CVE-2006-3427 | — | — | 24.3% | Jul 7, 2006 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by declaring the sourceURL at... |
| CVE-2006-3426 | — | — | 2.6% | Jul 7, 2006 | Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b... |
| CVE-2006-3425 | — | — | 2.3% | Jul 7, 2006 | FastPatch for (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1, and (b) Novell ZENworks 6.2 ... |
| CVE-2006-3412 | — | — | 2.2% | Jul 7, 2006 | Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intende... |
| CVE-2006-3424 | — | — | 3.1% | Jul 7, 2006 | Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote a... |
| CVE-2006-3423 | — | — | 8.6% | Jul 7, 2006 | WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which a... |
| CVE-2006-3422 | — | — | 2.5% | Jul 7, 2006 | PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via ... |
| CVE-2006-3421 | — | — | 4.2% | Jul 7, 2006 | PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote... |
| CVE-2006-3420 | — | — | 1.5% | Jul 7, 2006 | Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote att... |
| CVE-2006-3419 | — | — | 1.6% | Jul 7, 2006 | Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes,... |
| CVE-2006-3418 | — | — | 2.1% | Jul 7, 2006 | Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows... |
| CVE-2006-3417 | — | — | 2.1% | Jul 7, 2006 | Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers ... |
| CVE-2006-3416 | — | — | 1.8% | Jul 7, 2006 | Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to b... |
| CVE-2006-3413 | — | — | 1.7% | Jul 7, 2006 | The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which al... |
| CVE-2006-3414 | — | — | 2.1% | Jul 7, 2006 | Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote atta... |
| CVE-2006-3415 | — | — | 2.0% | Jul 7, 2006 | Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now