Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
January

CVEs published in January 2006

382 vulnerabilities, 43 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

powerportalMultiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow...CVE-2006-0358Public exploit7.5 HighJanuary 22, 2006
grant averett cerberus ftp serverGrant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to...CVE-2006-0357Public exploit5.0 MediumJanuary 22, 2006
ari pikivirta home ftp serverAri Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of...CVE-2006-03565.0 MediumJanuary 22, 2006
helmsman research homeftpHelmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified...CVE-2006-0355Public exploit5.0 MediumJanuary 22, 2006
cisco aironet ap1100, aironet ap1130ag, aironet ap1200 +5 more +7 moreCisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated...CVE-2006-0354Public exploitEPSS 10.5%5.5 MediumJanuary 22, 2006
gnu lshunix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator,...CVE-2006-0353Fix available3.6 LowJanuary 22, 2006
fluffington flogThe default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document...CVE-2006-03525.0 MediumJanuary 21, 2006
don moore mydnsUnspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact...CVE-2006-0351Fix available5.0 MediumJanuary 21, 2006
epic designs eggblogCross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject...CVE-2006-0350Public exploit4.3 MediumJanuary 21, 2006
epic designs eggblogSQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL...CVE-2006-0349Public exploit7.5 HighJanuary 21, 2006
stefan ritt elog web logbookFormat string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote...CVE-2006-03485.0 MediumJanuary 21, 2006
stefan ritt elog web logbookDirectory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access...CVE-2006-03475.0 MediumJanuary 21, 2006
saral kaushik saralblogCross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject...CVE-2006-03464.3 MediumJanuary 21, 2006
saral kaushik saralblogMultiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute...CVE-2006-0345Public exploit7.5 HighJanuary 21, 2006
intervations filecopaDirectory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote...CVE-2006-03446.4 MediumJanuary 21, 2006
hitachi jpi netsight ii port discovery advance, jpi netsight ii port discovery standard +1 moreUnspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1...CVE-2006-03435.0 MediumJanuary 21, 2006
rockliffe mailsiteRockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a...CVE-2006-03427.8 HighJanuary 21, 2006
cisco iosUnspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0...CVE-2006-03407.1 HighJanuary 21, 2006
bitcometBuffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when...CVE-2006-03397.5 HighJanuary 21, 2006
f-secure anti-virus, internet security, personal express +1 more +3 moreMultiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus...CVE-2006-03385.0 MediumJanuary 21, 2006
f-secure anti-virus, internet security, internet gatekeeper +1 more +3 moreBuffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux,...CVE-2006-03377.5 HighJanuary 21, 2006
kerio winroute firewallKerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU...CVE-2006-03365.0 MediumJanuary 21, 2006
kerio winroute firewallMultiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote...CVE-2006-03355.0 MediumJanuary 21, 2006
freekrai.net my amazon store managerCross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows...CVE-2006-03344.3 MediumJanuary 21, 2006
ar-blogCross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject...CVE-2006-03334.3 MediumJanuary 21, 2006
ecartisPantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible...CVE-2006-03326.4 MediumJanuary 21, 2006
thiago melo de paula change passwdBuffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute...CVE-2006-0331Public exploit4.6 MediumJanuary 21, 2006
gallery project galleryCross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to...CVE-2006-03304.3 MediumJanuary 21, 2006
hitachi hitsenser data mart serverSQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows...CVE-2006-03297.5 HighJanuary 21, 2006
philippe jounin tftpd32Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service...CVE-2006-0328Public exploit5.0 MediumJanuary 21, 2006
typo3TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1)...CVE-2006-03275.0 MediumJanuary 21, 2006
etomiteEtomite Content Management System 0.6, and possibly earlier versions, when downloaded from the...CVE-2006-03257.5 HighJanuary 20, 2006
linley henzell dungeon crawlcrawl before 4.0.0 does not securely call programs when saving and loading games, which allows...CVE-2006-0045Fix available7.2 HighJanuary 20, 2006
kdeHeap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript...CVE-2006-0019Fix available7.5 HighJanuary 20, 2006
webspot webspotbloggingSQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary...CVE-2006-0324Public exploit7.5 HighJanuary 19, 2006
mediawikiUnspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5...CVE-2006-0322Fix available5.0 MediumJanuary 19, 2006
bit 5 blog 5 blogSQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers...CVE-2006-0320Public exploit7.5 HighJanuary 19, 2006
farmers wife wifeDirectory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1...CVE-2006-0319Public exploit5.0 MediumJanuary 19, 2006
insane visions blogphpSQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled,...CVE-2006-0318Public exploit7.5 HighJanuary 19, 2006
redkernel referrer trackerCross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3...CVE-2006-0317Public exploit4.3 MediumJanuary 19, 2006
aol client softwareBuffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX...CVE-2006-0316EPSS 10.5%10.0 HighJanuary 19, 2006
indexcor ezdatabaseindex.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before...CVE-2006-0315Public exploit5.8 MediumJanuary 19, 2006
pdfdirectoryPDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to...CVE-2006-03147.5 HighJanuary 19, 2006
pdfdirectoryMultiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to...CVE-2006-03137.5 HighJanuary 19, 2006
mike helton aobloggercreate.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog...CVE-2006-0312Public exploit5.0 MediumJanuary 19, 2006
mike helton aobloggerSQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute...CVE-2006-0311Public exploit7.5 HighJanuary 19, 2006
mike helton aobloggerCross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject...CVE-2006-0310Public exploit4.3 MediumJanuary 19, 2006
linksys befvp41Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network...CVE-2006-03094.0 MediumJanuary 19, 2006
freebsdInteger overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0...CVE-2006-022610.0 HighJanuary 19, 2006
htmltonukePHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and...CVE-2006-0308Public exploit7.5 HighJanuary 19, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open