2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

CVE IDSeverityCVSSDescription
CVE-2006-2769——The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent"...
CVE-2006-2770——Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allow...
CVE-2006-2771——admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attack...
CVE-2006-2662——VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might all...
CVE-2006-2772——Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to injec...
CVE-2006-2761——SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP all...
CVE-2006-2762——PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute a...
CVE-2006-2763——SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1...
CVE-2006-2764——Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HT...
CVE-2006-2765——Cross-site scripting (XSS) vulnerability in news_information.php in Interlink Advantage allows remote attackers to injec...
CVE-2006-2759——jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp ext...
CVE-2006-2655——The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/s...
CVE-2006-2654——Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restricti...
CVE-2006-2756——Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service (application crash) via a long GET request...
CVE-2006-2757——Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or...
CVE-2006-2758——Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %...
CVE-2006-2760——SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL c...
CVE-2006-2755——Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject ar...
CVE-2006-2308——Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other us...
CVE-2006-2309——The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests conta...
CVE-2006-2753——SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to e...
CVE-2006-2754——Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code...
CVE-2006-2703——The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers to...
CVE-2006-2439——Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP...
CVE-2006-2752——The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permi...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now