2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-3487 | — | — | 1.2% | Jul 10, 2006 | VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attacker... |
| CVE-2006-3488 | — | — | 1.2% | Jul 10, 2006 | Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read a... |
| CVE-2006-3489 | — | — | 1.6% | Jul 10, 2006 | F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for ... |
| CVE-2006-3490 | — | — | 1.6% | Jul 10, 2006 | F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for ... |
| CVE-2006-3492 | — | — | 2.3% | Jul 10, 2006 | The CORBA::ORBInvokeRec::set_answer_invoke function in orb.cc in MICO (Mico Is CORBA) 2.3.12 and earlier allows remote a... |
| CVE-2006-3493 | — | — | 40.4% | Jul 10, 2006 | Buffer overflow in LsCreateLine function (mso_203) in mso.dll and mso9.dll, as used by Microsoft Word and possibly other... |
| CVE-2006-3494 | — | — | 3.4% | Jul 10, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Buddy Zone 1.0.1 allow remote attackers to inject arbitrary HTML ... |
| CVE-2006-3486 | — | — | 0.7% | Jul 10, 2006 | Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Insta... |
| CVE-2006-3480 | — | — | 1.6% | Jul 10, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary ... |
| CVE-2006-3481 | — | — | 1.7% | Jul 10, 2006 | Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow remote attackers to execute arbitrary SQL commands... |
| CVE-2006-3482 | — | — | 1.3% | Jul 10, 2006 | Cross-site scripting (XSS) vulnerability in maillist.php in PHPMailList 1.8.0 and earlier allows remote attackers to inj... |
| CVE-2006-3483 | — | — | 1.4% | Jul 10, 2006 | PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allow... |
| CVE-2006-3484 | — | — | 2.6% | Jul 10, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 1.5.3 allow remote attackers to inject arbitrary we... |
| CVE-2006-3485 | — | — | 1.4% | Jul 10, 2006 | Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execut... |
| CVE-2006-3479 | — | — | 1.3% | Jul 10, 2006 | Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5... |
| CVE-2006-3472 | — | — | 10.6% | Jul 10, 2006 | Microsoft Internet Explorer 6.0 and 6.0 SP1 allows remote attackers to cause a denial of service via an HTML page with a... |
| CVE-2006-3473 | — | — | 1.5% | Jul 10, 2006 | CRLF injection vulnerability in form_mail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers,... |
| CVE-2006-3474 | — | — | 1.1% | Jul 10, 2006 | Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL com... |
| CVE-2006-3475 | — | — | 8.0% | Jul 10, 2006 | Multiple PHP remote file inclusion vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP co... |
| CVE-2006-3476 | — | — | 1.9% | Jul 10, 2006 | Cross-site scripting (XSS) vulnerability in comments.php in PhpWebGallery 1.5.2 and earlier, and possibly 1.6.0, allows ... |
| CVE-2006-3477 | — | — | 1.6% | Jul 10, 2006 | Unspecified vulnerability in the POP service in Stalker CommuniGate Pro 5.1c1 and earlier allows remote attackers to cau... |
| CVE-2006-3478 | — | — | 2.5% | Jul 10, 2006 | PHP remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier, when register_... |
| CVE-2006-2936 | — | — | 2.9% | Jul 10, 2006 | The ftdi_sio driver (usb/serial/ftdi_sio.c) in Linux kernel 2.6.x up to 2.6.17, and possibly later versions, allows loca... |
| CVE-2006-3470 | — | — | 2.0% | Jul 10, 2006 | The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to... |
| CVE-2006-3471 | — | — | 20.8% | Jul 10, 2006 | Microsoft Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) via a table wit... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now