2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-1228 | — | — | 1.8% | Mar 14, 2006 | Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privi... |
| CVE-2006-1227 | — | — | 0.9% | Mar 14, 2006 | Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement acc... |
| CVE-2006-1226 | — | — | 1.7% | Mar 14, 2006 | Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to ... |
| CVE-2006-1225 | — | — | 2.0% | Mar 14, 2006 | CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject heade... |
| CVE-2006-1234 | — | — | 3.5% | Mar 14, 2006 | SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to ex... |
| CVE-2006-1232 | — | — | 3.9% | Mar 14, 2006 | Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to exec... |
| CVE-2006-1231 | — | — | 0.3% | Mar 14, 2006 | CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a s... |
| CVE-2006-0400 | — | — | 1.8% | Mar 14, 2006 | CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javas... |
| CVE-2006-1222 | — | — | 1.8% | Mar 14, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitra... |
| CVE-2006-0398 | — | — | 1.5% | Mar 14, 2006 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attacke... |
| CVE-2006-0397 | — | — | 1.5% | Mar 14, 2006 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attacke... |
| CVE-2006-1223 | — | — | 2.4% | Mar 14, 2006 | Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject ... |
| CVE-2006-1224 | — | — | 3.6% | Mar 14, 2006 | Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via ... |
| CVE-2006-0396 | — | — | 10.8% | Mar 14, 2006 | Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote a... |
| CVE-2006-0399 | — | — | 1.5% | Mar 14, 2006 | Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attacke... |
| CVE-2006-1221 | — | — | 0.5% | Mar 14, 2006 | Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does ... |
| CVE-2006-1217 | — | — | 1.9% | Mar 14, 2006 | SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid param... |
| CVE-2006-1218 | — | — | 1.6% | Mar 14, 2006 | Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a d... |
| CVE-2006-1219 | — | — | 3.7% | Mar 14, 2006 | Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include... |
| CVE-2006-1220 | — | — | 0.6% | Mar 14, 2006 | Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary c... |
| CVE-2006-0457 | — | — | 2.7% | Mar 14, 2006 | Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to... |
| CVE-2006-1216 | — | — | 1.9% | Mar 14, 2006 | Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web sc... |
| CVE-2006-1215 | — | — | 1.7% | Mar 14, 2006 | Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inj... |
| CVE-2006-1200 | — | — | 1.9% | Mar 14, 2006 | Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbi... |
| CVE-2006-1214 | — | — | 3.8% | Mar 14, 2006 | UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send ma... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now