Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
January

CVEs published in January 2006

382 vulnerabilities, 43 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

netbsdThe kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly...CVE-2006-01454.6 MediumJanuary 9, 2006
apache2triad, php pear +1 moreThe proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote...CVE-2006-01447.5 HighJanuary 9, 2006
microsoft windows 2000, windows 2003 server, windows 98 +3 more +5 moreMicrosoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and...CVE-2006-0143Public exploitEPSS 31.3%7.5 HighJanuary 9, 2006
andromeda software andromedaCross-site scripting (XSS) vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows...CVE-2006-01424.3 MediumJanuary 9, 2006
eudora internet mail serverQualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a...CVE-2006-01415.0 MediumJanuary 9, 2006
navboardCross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2...CVE-2006-01404.3 MediumJanuary 9, 2006
pd9 software megabbsThe send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1...CVE-2006-01395.0 MediumJanuary 9, 2006
amsnaMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang...CVE-2006-0138Public exploit5.0 MediumJanuary 9, 2006
phanatic softwares chimera web portalSQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0...CVE-2006-0137Public exploit7.5 HighJanuary 9, 2006
phanatic softwares chimera web portalMultiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in...CVE-2006-0136Public exploit4.3 MediumJanuary 9, 2006
thewebforumSQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to...CVE-2006-0135Public exploit7.5 HighJanuary 9, 2006
thewebforumCross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote...CVE-2006-01344.3 MediumJanuary 9, 2006
ibm aixMultiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the...CVE-2006-0133Public exploit3.6 LowJanuary 9, 2006
webftpDirectory traversal vulnerability in webftp.php in SysCP WebFTP 1.2.6 and possibly earlier allows...CVE-2006-01325.0 MediumJanuary 9, 2006
boastmachineboastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to ...CVE-2006-01315.0 MediumJanuary 9, 2006
rockliffe mailsiteMail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and...CVE-2006-01307.5 HighJanuary 9, 2006
rockliffe mailsiteMail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and...CVE-2006-01295.0 MediumJanuary 9, 2006
rockliffe mailsiteBuffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers...CVE-2006-012810.0 HighJanuary 9, 2006
rockliffe mailsiteDirectory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1...CVE-2006-01274.0 MediumJanuary 9, 2006
rxvt-unicoderxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as...CVE-2006-0126Fix available4.6 MediumJanuary 9, 2006
appserv open project appservUnspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include...CVE-2006-0125Public exploit5.0 MediumJanuary 9, 2006
adn forum forumCross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers...CVE-2006-01244.3 MediumJanuary 9, 2006
adn forum forumMultiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute...CVE-2006-0123Public exploit7.5 HighJanuary 9, 2006
aquifer cms cmsCross-site scripting (XSS) vulnerability in Public/Index.asp in Aquifer CMS allows remote...CVE-2006-01224.3 MediumJanuary 9, 2006
ibm lotus notes, lotus domino, lotus domino enterprise server +2 moreMultiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause...CVE-2006-01217.8 HighJanuary 9, 2006
ibm lotus notes, lotus domino, lotus domino enterprise server +2 moreMultiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow...CVE-2006-01205.0 MediumJanuary 9, 2006
ibm lotus notes, lotus domino, lotus domino enterprise server +2 moreMultiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have...CVE-2006-011910.0 HighJanuary 9, 2006
ibm lotus notes, lotus domino, lotus domino enterprise server +2 moreUnspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX,...CVE-2006-01185.0 MediumJanuary 9, 2006
ibm lotus notes, lotus domino, lotus domino enterprise server +2 moreBuffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a...CVE-2006-01175.0 MediumJanuary 9, 2006
inetstore onlineCross-site scripting vulnerability search.inetstore in iNETstore Ebusiness Software 2.0 allows...CVE-2006-01165.0 MediumJanuary 9, 2006
oneplug solutions cmsMultiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to...CVE-2006-0115Public exploit7.5 HighJanuary 9, 2006
joomlaThe vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not...CVE-2006-01145.0 MediumJanuary 9, 2006
stefan frings sms server toolsFormat string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier...CVE-2006-0083Fix available4.6 MediumJanuary 9, 2006
enhanced simple php gallery simple php galleryEnhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the...CVE-2006-01135.0 MediumJanuary 7, 2006
enhanced simple php gallery simple php galleryCross-site scripting (XSS) vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows...CVE-2006-01124.3 MediumJanuary 7, 2006
boxcar media shopping cartCross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote...CVE-2006-01115.0 MediumJanuary 7, 2006
javier suarez sanz foro domusCross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote...CVE-2006-0110Public exploit4.3 MediumJanuary 7, 2006
modular merchant shopping cartCross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows...CVE-2006-01095.0 MediumJanuary 7, 2006
idea development id oy timecan cmsSQL injection vulnerability in mcl_login.asp in Timecan CMS allows remote attackers to execute...CVE-2006-01087.5 HighJanuary 7, 2006
idea development id oy timecan cmsSQL injection vulnerability in Timecan CMS allows remote attackers to execute arbitrary SQL...CVE-2006-01077.5 HighJanuary 7, 2006
winegdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC...CVE-2006-0106Fix available7.5 HighJanuary 6, 2006
ralph capper tinyphpforumDirectory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to...CVE-2006-01045.0 MediumJanuary 6, 2006
ralph capper tinyphpforumTinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email...CVE-2006-0103Public exploit5.0 MediumJanuary 6, 2006
ralph capper tinyphpforumCross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote...CVE-2006-01024.3 MediumJanuary 6, 2006
sblogMultiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier...CVE-2006-01014.3 MediumJanuary 6, 2006
nicosw nicoftpBuffer overflow in NicoFTP 3.0.1.19 and earlier might allow local users to execute arbitrary code...CVE-2006-01004.6 MediumJanuary 6, 2006
valdersoft shopping cartPHP remote file include vulnerability in (1) include/templates/categories/default.php and (2)...CVE-2006-0099Public exploit7.5 HighJanuary 6, 2006
openbsdThe dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re...CVE-2006-00984.6 MediumJanuary 6, 2006
phpStack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4...CVE-2006-0097Public exploitEPSS 12.2%7.5 HighJanuary 6, 2006
linux kernelwan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the...CVE-2006-00967.2 HighJanuary 6, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open