2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-0935 | — | — | 6.3% | Feb 28, 2006 | Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demo... |
| CVE-2006-0933 | — | — | 1.7% | Feb 28, 2006 | Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML vi... |
| CVE-2006-0932 | — | — | 1.8% | Feb 28, 2006 | Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwr... |
| CVE-2006-0931 | — | — | 2.4% | Feb 28, 2006 | Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to ... |
| CVE-2006-0930 | — | — | 1.4% | Feb 28, 2006 | Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read a... |
| CVE-2006-0929 | — | — | 1.3% | Feb 28, 2006 | Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated use... |
| CVE-2006-0928 | — | — | 2.1% | Feb 28, 2006 | The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the _DUMP co... |
| CVE-2006-0927 | — | — | 2.0% | Feb 28, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burnin... |
| CVE-2006-0926 | — | — | 1.6% | Feb 28, 2006 | Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt... |
| CVE-2006-0925 | — | — | 3.1% | Feb 28, 2006 | Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to... |
| CVE-2006-0924 | — | — | 1.2% | Feb 28, 2006 | Cross-site scripting (XSS) vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script ... |
| CVE-2006-0923 | — | — | 2.1% | Feb 28, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject... |
| CVE-2006-0922 | — | — | 8.0% | Feb 28, 2006 | CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.i... |
| CVE-2006-0921 | — | — | 1.6% | Feb 28, 2006 | Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, a... |
| CVE-2006-0920 | — | — | 0.8% | Feb 28, 2006 | Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, wh... |
| CVE-2006-0919 | — | — | 1.3% | Feb 28, 2006 | SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remot... |
| CVE-2006-0918 | — | — | 3.6% | Feb 28, 2006 | Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field. |
| CVE-2006-0917 | — | — | 0.3% | Feb 28, 2006 | Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive infor... |
| CVE-2006-0916 | — | — | 1.2% | Feb 28, 2006 | Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form... |
| CVE-2006-0915 | — | — | 1.2% | Feb 28, 2006 | Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameter... |
| CVE-2006-0914 | — | — | 1.1% | Feb 28, 2006 | Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold par... |
| CVE-2006-0913 | — | — | 1.0% | Feb 28, 2006 | SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users... |
| CVE-2006-0912 | — | — | 1.6% | Feb 28, 2006 | Oreka before 0.5 allows remote attackers to cause a denial of service (application crash) via a "certain RTP sequence." |
| CVE-2006-0911 | — | — | 15.9% | Feb 28, 2006 | NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumptio... |
| CVE-2006-0910 | — | — | 1.3% | Feb 28, 2006 | Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to ... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now