Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
January

CVEs published in January 2006

382 vulnerabilities, 43 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7...CVE-2006-04244.0 MediumJanuary 25, 2006
oracle weblogic portalBEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in...CVE-2006-04237.5 HighJanuary 25, 2006
bea weblogic serverMultiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4,...CVE-2006-04226.4 MediumJanuary 25, 2006
bea weblogic serverBy design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains...CVE-2006-04214.6 MediumJanuary 25, 2006
bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly...CVE-2006-04205.0 MediumJanuary 25, 2006
bea weblogic serverBEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows...CVE-2006-04196.4 MediumJanuary 25, 2006
freebsdA logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and...CVE-2006-03815.0 MediumJanuary 25, 2006
freebsdA logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect...CVE-2006-03802.1 LowJanuary 25, 2006
freebsdFreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it...CVE-2006-03792.1 LowJanuary 25, 2006
topcmm computing 123 flash chat serverEval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute...CVE-2006-0418Public exploit7.5 HighJanuary 25, 2006
mywebland minibloggieSQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is...CVE-2006-0417Public exploit7.5 HighJanuary 25, 2006
sleeperchatSleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new...CVE-2006-04165.0 MediumJanuary 25, 2006
sleeperchatCross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows...CVE-2006-0415Public exploit4.3 MediumJanuary 25, 2006
torTor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor...CVE-2006-0414Fix available5.0 MediumJanuary 25, 2006
newsphpMultiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute...CVE-2006-0413Public exploit7.5 HighJanuary 25, 2006
gencbeyin web programlama cybershopSQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL...CVE-2006-04127.5 HighJanuary 25, 2006
clarolineclaro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of...CVE-2006-041110.0 HighJanuary 25, 2006
openbsd opensshscp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain...CVE-2006-0225Fix available4.6 MediumJanuary 25, 2006
john lim adodbSQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers...CVE-2006-0410Fix available5.0 MediumJanuary 25, 2006
pixelpost photoblogCross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote...CVE-2006-0409Public exploit4.3 MediumJanuary 25, 2006
sun grid enginersh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and...CVE-2006-04087.2 HighJanuary 25, 2006
azbb az bulletin boardCross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and...CVE-2006-0407Public exploit4.3 MediumJanuary 25, 2006
mybulletinboardsearch.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain...CVE-2006-04065.0 MediumJanuary 25, 2006
libtiffThe TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to...CVE-2006-0405Fix available5.0 MediumJanuary 25, 2006
mike macgirvin note-a-day weblogNote-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access...CVE-2006-04045.0 MediumJanuary 25, 2006
e-moblogMultiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute...CVE-2006-04037.5 HighJanuary 25, 2006
jason geiger zophSQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary...CVE-2006-0402Fix available7.5 HighJanuary 25, 2006
libastBuffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm...CVE-2006-0224Fix available4.6 MediumJanuary 25, 2006
fetchmailfetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of...CVE-2006-0321Fix available5.0 MediumJanuary 24, 2006
linux kernelip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and...CVE-2006-00374.9 MediumJanuary 23, 2006
linux kernelip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and...CVE-2006-00367.8 HighJanuary 23, 2006
netrix x-site managerCross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to...CVE-2006-03784.3 MediumJanuary 23, 2006
microsoft windows 2000, windows xp, windows 2003 server +2 moreThe 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and...CVE-2006-0376EPSS 18.2%7.5 HighJanuary 22, 2006
advantage century telecommunication p202sAdvantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 on...CVE-2006-03755.0 MediumJanuary 22, 2006
advantage century telecommunication p202sAdvantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has...CVE-2006-03747.5 HighJanuary 22, 2006
douran followwebCross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote...CVE-2006-03734.3 MediumJanuary 22, 2006
insane visions blogphpMultiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0,...CVE-2006-0372Public exploit7.5 HighJanuary 22, 2006
noah medling rcblogDirectory traversal vulnerability in index.php in Noah Medling RCBlog 1.03 allows remote...CVE-2006-03715.0 MediumJanuary 22, 2006
noah medling rcblogNoah Medling RCBlog 1.03 stores the data and config directories under the web root with...CVE-2006-03705.0 MediumJanuary 22, 2006
oracle mysql** DISPUTED ** MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive...CVE-2006-0369Disputed2.1 LowJanuary 22, 2006
cisco call managerCisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before 4.0(2a)SR2c, and 4.1 before 4...CVE-2006-03687.8 HighJanuary 22, 2006
cisco call managerUnspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.3(5)SR1, 4.0 before...CVE-2006-03676.5 MediumJanuary 22, 2006
phpclanwebsiteCross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to...CVE-2006-0366Public exploit4.3 MediumJanuary 22, 2006
xmb software forumCross-site scripting (XSS) vulnerability in XMB (aka extreme message board) allows remote...CVE-2006-03654.3 MediumJanuary 22, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to...CVE-2006-03644.3 MediumJanuary 22, 2006
microsoft msn messengerThe "Remember my Password" feature in MSN Messenger 7.5 stores passwords in an encrypted format...CVE-2006-03632.1 LowJanuary 22, 2006
3com tippingpoint ips tosTippingPoint Intrusion Prevention System (IPS) TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1...CVE-2006-03625.0 MediumJanuary 22, 2006
bit 5 blog 5 blogCross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote...CVE-2006-0361Public exploit4.3 MediumJanuary 22, 2006
mpm hp-180w voip wifi phoneMPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive...CVE-2006-03606.4 MediumJanuary 22, 2006
counterpath eyebeam sip softphoneBuffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a...CVE-2006-0359Public exploit7.5 HighJanuary 22, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open