2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

CVE IDSeverityCVSSDescription
CVE-2006-0891Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via ....
CVE-2006-0892NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remo...
CVE-2006-0893NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles direct...
CVE-2006-0894Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web s...
CVE-2006-0895NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.
CVE-2006-0896Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attac...
CVE-2006-0897SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to ...
CVE-2006-0898Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, w...
CVE-2006-0885Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary ...
CVE-2006-0889Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HTM...
CVE-2006-0886Cross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows remote attackers to inj...
CVE-2006-0887Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib d...
CVE-2006-0884The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacker...
CVE-2006-0813Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header bl...
CVE-2006-0882Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary ...
CVE-2006-0881Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals ...
CVE-2006-0880Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inj...
CVE-2006-0879SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQ...
CVE-2006-0878Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as...
CVE-2006-0877Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via ...
CVE-2006-0876POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors i...
CVE-2006-0875Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scrip...
CVE-2006-0874Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact, ...
CVE-2006-0873Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote a...
CVE-2006-0872Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers ...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now