2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2006-0702admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (d...
CVE-2006-0703Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulner...
CVE-2006-0704iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain s...
CVE-2006-0705Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflectio...
CVE-2006-0707PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP ...
CVE-2006-0706Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to injec...
CVE-2006-0708Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) a...
CVE-2006-0709Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly ...
CVE-2006-0681Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute ar...
CVE-2006-0687process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows r...
CVE-2006-0686add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a n...
CVE-2006-0685The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when au...
CVE-2006-0684change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a...
CVE-2006-0683Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier all...
CVE-2006-0682Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inj...
CVE-2006-0680Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous regi...
CVE-2006-0451Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of s...
CVE-2006-0382Apple Mac OS X 10.4.5 and allows local users to cause a denial of service (crash) via an undocumented system call.
CVE-2006-0453The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a cert...
CVE-2006-0006Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, M...
CVE-2006-0452dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (C...
CVE-2006-0004Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to o...
CVE-2006-0008The ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Wind...
CVE-2006-0678PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asse...
CVE-2006-0005Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Inter...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now