2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

CVE IDSeverityCVSSDescription
CVE-2006-3359——Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web s...
CVE-2006-3358——Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject ar...
CVE-2006-3357——Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote at...
CVE-2006-3356——The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to caus...
CVE-2006-3355——Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code vi...
CVE-2006-3351——Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a deni...
CVE-2006-3352——Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domain...
CVE-2006-3353——Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-boun...
CVE-2006-3354——Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter propert...
CVE-2006-3336——TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenam...
CVE-2006-2935——The dvd_read_bca function in the DVD handling code in drivers/cdrom/cdrom.c in Linux kernel 2.2.16, and later versions, ...
CVE-2006-2194——The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which...
CVE-2006-2910——Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute a...
CVE-2006-3349——Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the Ca...
CVE-2006-3344——Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using...
CVE-2006-3345——Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitr...
CVE-2006-3346——SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands vi...
CVE-2006-3347——SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQ...
CVE-2006-3348——Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute a...
CVE-2006-3341——SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbi...
CVE-2006-3340——Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is ena...
CVE-2006-3338——Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web sc...
CVE-2006-3337——Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows...
CVE-2006-3342——Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbi...
CVE-2006-3339——secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information vi...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now