2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

CVE IDSeverityCVSSDescription
CVE-2006-2929PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and earl...
CVE-2006-2912Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via t...
CVE-2006-2913Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HT...
CVE-2006-2927Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remot...
CVE-2006-2452GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Confi...
CVE-2006-2926Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial...
CVE-2006-2922Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PHP...
CVE-2006-2928Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, all...
CVE-2006-2919Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CP...
CVE-2006-2920Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and m...
CVE-2006-2193Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause ...
CVE-2006-2902Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".....
CVE-2006-2906The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2....
CVE-2006-2905Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) page_footer.php ...
CVE-2006-2904SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL command...
CVE-2006-2903Cross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrar...
CVE-2006-1173Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME ...
CVE-2006-2901The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obta...
CVE-2006-2900Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the cha...
CVE-2006-2889Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute ...
CVE-2006-2893index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang paramete...
CVE-2006-2894Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1...
CVE-2006-2888PHP remote file inclusion vulnerability in _wk/wk_lang.php in Wikiwig 4.1 and earlier allows remote attackers to execute...
CVE-2006-2887Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL...
CVE-2006-2886view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path via...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now