Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
January

CVEs published in January 2006

382 vulnerabilities, 43 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

widexl download trackerCross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote...CVE-2006-02464.3 MediumJanuary 18, 2006
devellion cubecartMultiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers...CVE-2006-02454.3 MediumJanuary 18, 2006
phpxplorer** DISPUTED ** Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows...CVE-2006-0244Public exploitDisputed5.0 MediumJanuary 18, 2006
smbcmsCross-site scripting (XSS) vulnerability in SMBCMS 2.1 allows remote attackers to inject...CVE-2006-02434.3 MediumJanuary 18, 2006
php fusebox fuseboxCross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to...CVE-2006-02426.4 MediumJanuary 18, 2006
webmobo wbnewsCross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject...CVE-2006-02415.0 MediumJanuary 18, 2006
8pixel.net simple blogMultiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute...CVE-2006-0240Public exploit7.5 HighJanuary 18, 2006
8pixel.net simple blogMultiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to...CVE-2006-02395.8 MediumJanuary 18, 2006
gamerz wp-statsSQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to...CVE-2006-02387.5 HighJanuary 18, 2006
gtp icommerceCross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to...CVE-2006-0237Public exploit4.3 MediumJanuary 18, 2006
mozilla thunderbirdGUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user...CVE-2006-02365.1 MediumJanuary 18, 2006
white angle albumSQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL...CVE-2006-0235Public exploit7.5 HighJanuary 18, 2006
microblogSQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to...CVE-2006-0234Public exploit7.5 HighJanuary 18, 2006
microblogCross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote...CVE-2006-02334.3 MediumJanuary 18, 2006
wehnus wehntrustUnquoted Windows search path vulnerability in Wehntrust might allow local users to gain...CVE-2006-02292.1 LowJanuary 17, 2006
grsecurity kernel patchThe RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role...CVE-2006-02287.2 HighJanuary 17, 2006
sun solaris, sunos +1 moreMultiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to...CVE-2006-02272.6 LowJanuary 17, 2006
mantismanage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter...CVE-2006-08405.0 MediumJanuary 17, 2006
topcmm computing 123 flash chat serverDirectory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows...CVE-2006-02235.0 MediumJanuary 16, 2006
alstrasoft template sellerCross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows...CVE-2006-0222Public exploit4.3 MediumJanuary 16, 2006
ddsn cm3cmsSQL injection vulnerability in index.asp in the Admin Panel in Dragon Design Services Network ...CVE-2006-02217.5 HighJanuary 16, 2006
codeworx technologies dcp-portalMultiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3 through 6.1.1 allow remote...CVE-2006-02204.3 MediumJanuary 16, 2006
mybulletinboardThe original distribution of MyBulletinBoard (MyBB) to update from older versions to 1.0.2 omits...CVE-2006-02197.5 HighJanuary 16, 2006
mybbMultiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0.2 have unspecified...CVE-2006-021810.0 HighJanuary 16, 2006
ultimate auction auctionMultiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote...CVE-2006-0217Public exploit4.3 MediumJanuary 16, 2006
qualityebiz quality ppcadmin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to obtain...CVE-2006-02165.0 MediumJanuary 16, 2006
qualityebiz quality ppcCross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build...CVE-2006-02154.3 MediumJanuary 16, 2006
albatrossUnspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows...CVE-2006-0044Fix available7.5 HighJanuary 16, 2006
indexcor ezdatabaseEval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute...CVE-2006-0214Public exploit7.5 HighJanuary 15, 2006
kolab groupware serverKolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when...CVE-2006-02134.6 MediumJanuary 14, 2006
toshiba bluetooth stackDirectory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and...CVE-2006-02125.0 MediumJanuary 14, 2006
helm hosting control panelCross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2...CVE-2006-0211Public exploit4.3 MediumJanuary 14, 2006
interspire trackpoint nxCross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1...CVE-2006-0210Public exploit4.3 MediumJanuary 14, 2006
tankloggerSQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to...CVE-2006-0209Public exploit7.5 HighJanuary 14, 2006
phpMultiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors...CVE-2006-02082.6 LowJanuary 13, 2006
phpMultiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote attackers to inject...CVE-2006-02075.0 MediumJanuary 13, 2006
light weight calendar weight calendarEval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows...CVE-2006-0206Public exploit7.5 HighJanuary 13, 2006
wordcircleMultiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute...CVE-2006-02055.1 MediumJanuary 13, 2006
wordcircleMultiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to...CVE-2006-02044.3 MediumJanuary 13, 2006
mini-nuke cms systemmembership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when...CVE-2006-02035.0 MediumJanuary 13, 2006
paypal php toolkitDave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50 and possibly...CVE-2006-02023.6 LowJanuary 13, 2006
paypal php toolkitDave Nielsen and Patrick Breitenbach PayPal Web Services (aka PHP Toolkit) 0.50, and possibly...CVE-2006-02015.0 MediumJanuary 13, 2006
phpFormat string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0...CVE-2006-0200EPSS 20.0%9.3 HighJanuary 13, 2006
mini-nuke cms systemSQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote...CVE-2006-0199Public exploit7.5 HighJanuary 13, 2006
xoops pool moduleCross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS...CVE-2006-0198Public exploit4.3 MediumJanuary 13, 2006
x.orgThe XClientMessageEvent struct used in certain components of X.Org 6.8.2 and earlier, possibly...CVE-2006-01975.0 MediumJanuary 13, 2006
serial line sniffer line snifferUnspecified vulnerability in Serial line sniffer (aka slsnif) 0.4.4 allows local users to gain...CVE-2006-01964.6 MediumJanuary 13, 2006
fog creek software fogbugzCross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions...CVE-2006-0194Public exploit4.3 MediumJanuary 13, 2006
positive software h-sphereCross-site scripting (XSS) vulnerability in the Hosting Control Panel (psoft.hsphere.CP) in...CVE-2006-01934.3 MediumJanuary 13, 2006
philip loftin aspsurveySQL injection vulnerability in Login_Validate.asp in ASPSurvey 1.10 allows remote attackers to...CVE-2006-01927.5 HighJanuary 13, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open