2006 CVE Vulnerabilities
7,145 CVEs published in 2006.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2006-5247 | — | — | 1.6% | Oct 12, 2006 | Multiple cross-site scripting (XSS) vulnerabilities in Eazy Cart allow remote attackers to inject arbitrary web script o... |
| CVE-2006-5248 | — | — | 1.6% | Oct 12, 2006 | Eazy Cart stores sensitive information under the web root with insufficient access control, which allows remote attacker... |
| CVE-2006-5249 | — | — | 3.1% | Oct 12, 2006 | PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remot... |
| CVE-2006-4840 | — | — | — | Oct 12, 2006 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-3888. Reason: This candidate is a reservation ... |
| CVE-2006-4842 | — | — | 7.7% | Oct 12, 2006 | The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment v... |
| CVE-2006-5235 | — | — | 1.2% | Oct 11, 2006 | PHP remote file inclusion vulnerability in includes/functions_kb.php in Dimension of phpBB 0.2.6 and earlier allows remo... |
| CVE-2006-5236 | — | — | 2.0% | Oct 11, 2006 | SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL co... |
| CVE-2006-5234 | — | — | 2.7% | Oct 11, 2006 | Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP ... |
| CVE-2006-5233 | — | — | 1.7% | Oct 11, 2006 | Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of ... |
| CVE-2006-5232 | — | — | 2.7% | Oct 11, 2006 | Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code ... |
| CVE-2006-5230 | — | — | 3.2% | Oct 11, 2006 | PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute a... |
| CVE-2006-5231 | — | — | 2.1% | Oct 11, 2006 | Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service ... |
| CVE-2006-3887 | — | — | 4.5% | Oct 10, 2006 | Buffer overflow in AOL You've Got Pictures (YGP) Screensaver ActiveX control allows remote attackers to execute arbitrar... |
| CVE-2006-3888 | — | — | 5.8% | Oct 10, 2006 | Buffer overflow in AOL You've Got Pictures (YGP) Pic Downloader YGPPDownload ActiveX control (AOL.PicDownloadCtrl.1, YGP... |
| CVE-2006-5229 | — | — | 54.0% | Oct 10, 2006 | OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations... |
| CVE-2006-3978 | — | — | 0.9% | Oct 10, 2006 | Unspecified vulnerability in a Verity third party library, as used on Adobe ColdFusion MX 7 through MX 7.0.2 and possibl... |
| CVE-2006-4696 | — | — | 43.2% | Oct 10, 2006 | Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 a... |
| CVE-2006-3651 | — | — | 30.7% | Oct 10, 2006 | Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute... |
| CVE-2006-2387 | — | — | 12.1% | Oct 10, 2006 | Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microso... |
| CVE-2006-4685 | — | — | 19.6% | Oct 10, 2006 | The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle H... |
| CVE-2006-4686 | — | — | 28.8% | Oct 10, 2006 | Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and ... |
| CVE-2006-5199 | — | — | 0.6% | Oct 10, 2006 | Adobe Contribute Publishing Server leaks the administrator password in logs that are created during product installation... |
| CVE-2006-5200 | — | — | 2.6% | Oct 10, 2006 | Unspecified vulnerability in Adobe Breeze 5 Licensed Server and Breeze 5.1 Licensed Server allows attackers to read arbi... |
| CVE-2006-4693 | — | — | 22.4% | Oct 10, 2006 | Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execut... |
| CVE-2006-4692 | — | — | 27.1% | Oct 10, 2006 | Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and S... |
Check if your code is affected by 2006 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now