2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

CVE IDSeverityCVSSDescription
CVE-2006-2927——Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remot...
CVE-2006-2926——Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial...
CVE-2006-2925——Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1...
CVE-2006-2923——The iax_net_read function in the iaxclient open source library, as used in multiple products including (a) LoudHush 1.3....
CVE-2006-2922——Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PHP...
CVE-2006-2921——PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when regist...
CVE-2006-2913——Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HT...
CVE-2006-2912——Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via t...
CVE-2006-2919——Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CP...
CVE-2006-2920——Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and m...
CVE-2006-2193——Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause ...
CVE-2006-2903——Cross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrar...
CVE-2006-2906——The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2....
CVE-2006-2902——Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".....
CVE-2006-2905——Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) page_footer.php ...
CVE-2006-2904——SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL command...
CVE-2006-1173——Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME ...
CVE-2006-2901——The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obta...
CVE-2006-2900——Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the cha...
CVE-2006-2882——Multiple cross-site scripting (XSS) vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote att...
CVE-2006-2881——Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, al...
CVE-2006-2880——Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attac...
CVE-2006-2879——SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute...
CVE-2006-2894——Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1...
CVE-2006-2895——Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to injec...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now