2006 CVE Vulnerabilities

7,145 CVEs published in 2006.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2006-6297Stack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, a...
CVE-2006-6298SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute...
CVE-2006-6299Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows...
CVE-2006-6300Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTM...
CVE-2006-6306Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allow...
CVE-2006-6307srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of servic...
CVE-2006-6295PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 all...
CVE-2006-6243Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands...
CVE-2006-6251Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long st...
CVE-2006-6244Coalescent Systems freePBX (formerly Asterisk Management Portal) before 2.2.0rc1 allows attackers to execute arbitrary c...
CVE-2006-6245Multiple SQL injection vulnerabilities in Photo Organizer (PO) 2.32b and earlier allow remote attackers to execute arbit...
CVE-2006-6246Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attacker...
CVE-2006-6247Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL...
CVE-2006-6248index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which rev...
CVE-2006-6249Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web...
CVE-2006-6250Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servic...
CVE-2006-6252Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a...
CVE-2006-6253Cahier de texte 2.0 stores sensitive information under the web root, possibly with insufficient access control, which mi...
CVE-2006-6254administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) o...
CVE-2006-6255Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an...
CVE-2006-6256Cross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php in AlternC 0.9.5 and earlier allows r...
CVE-2006-6257The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensi...
CVE-2006-6258The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might a...
CVE-2006-6259Multiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php in AlternC 0.9.5 and ear...
CVE-2006-6260SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows rem...

Check if your code is affected by 2006 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now