2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2006-3371——Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allow...
CVE-2006-3370——Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, which allows remot...
CVE-2006-3353——Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-boun...
CVE-2006-3352——Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domain...
CVE-2006-3351——Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a deni...
CVE-2006-3354——Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter propert...
CVE-2006-3336——TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenam...
CVE-2006-2935——The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, ...
CVE-2006-2910——Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute a...
CVE-2006-2194——The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which...
CVE-2006-3345——Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitr...
CVE-2006-3344——Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using...
CVE-2006-3349——Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the Ca...
CVE-2006-3348——Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute a...
CVE-2006-3347——SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQ...
CVE-2006-3346——SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands vi...
CVE-2006-3342——Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbi...
CVE-2006-3341——SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbi...
CVE-2006-3340——Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is ena...
CVE-2006-3339——secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information vi...
CVE-2006-3338——Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web sc...
CVE-2006-3343——PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to ex...
CVE-2006-3337——Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows...
CVE-2006-3335——Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges...
CVE-2006-3329——SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute ...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now