2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-6737 | — | — | 2.3% | Dec 26, 2006 | Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier,... |
| CVE-2006-6738 | — | — | 2.0% | Dec 26, 2006 | PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to exec... |
| CVE-2006-6739 | — | — | 2.1% | Dec 26, 2006 | PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP... |
| CVE-2006-6741 | — | — | 0.9% | Dec 26, 2006 | Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messa... |
| CVE-2006-6742 | — | — | 2.9% | Dec 26, 2006 | Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 or... |
| CVE-2006-6743 | — | — | 0.3% | Dec 26, 2006 | phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local u... |
| CVE-2006-6744 | — | — | 0.4% | Dec 26, 2006 | phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3)... |
| CVE-2006-6745 | — | — | 3.1% | Dec 26, 2006 | Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 a... |
| CVE-2006-6740 | — | — | 9.1% | Dec 26, 2006 | Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute a... |
| CVE-2006-6727 | — | — | 1.2% | Dec 26, 2006 | PHP remote file inclusion vulnerability in inertianews_class.php in inertianews 0.02 beta and earlier allows remote atta... |
| CVE-2006-6724 | — | — | 2.3% | Dec 26, 2006 | BolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to cause a denial of servi... |
| CVE-2006-6725 | — | — | 1.5% | Dec 26, 2006 | Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary fi... |
| CVE-2006-6726 | — | — | 2.4% | Dec 26, 2006 | PHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows remote attackers to exec... |
| CVE-2006-6728 | — | — | 1.4% | Dec 26, 2006 | Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause... |
| CVE-2006-6729 | — | — | 1.8% | Dec 26, 2006 | Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web scri... |
| CVE-2006-6723 | — | — | 38.0% | Dec 26, 2006 | The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (m... |
| CVE-2006-6719 | — | — | 3.9% | Dec 23, 2006 | The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause ... |
| CVE-2006-6716 | — | — | 1.0% | Dec 23, 2006 | SQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader&downloader 3 allows remote atta... |
| CVE-2006-6717 | — | — | 1.4% | Dec 23, 2006 | The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documenta... |
| CVE-2006-6718 | — | — | 1.2% | Dec 23, 2006 | The Allied Telesis AT-9000/24 Ethernet switch has a default password for its admin account, "manager," which allows remo... |
| CVE-2006-6720 | — | — | 2.6% | Dec 23, 2006 | PHP remote file inclusion vulnerability in admin/index_sitios.php in Azucar CMS 1.3 allows remote attackers to execute a... |
| CVE-2006-6721 | — | — | 1.7% | Dec 23, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to... |
| CVE-2006-6722 | — | — | 2.3% | Dec 23, 2006 | Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct requ... |
| CVE-2006-6703 | — | — | 1.9% | Dec 23, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitra... |
| CVE-2006-6699 | — | — | 1.0% | Dec 23, 2006 | Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inj... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now