Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
March

CVEs published in March 2006

542 vulnerabilities, 23 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

xerox copycentre c65 firmware, copycentre c75 firmware, copycentre c90 firmware +3 more +5 moreUnspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro,...CVE-2006-11385.0 MediumMarch 10, 2006
xerox copycentre c65 firmware, copycentre c75 firmware, copycentre c90 firmware +3 more +5 moreMultiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running...CVE-2006-11375.0 MediumMarch 10, 2006
xerox copycentre c65, copycentre c75, copycentre c90 +3 more +5 moreBuffer overflow in the PostScript file interpreter code for Xerox CopyCentre and Xerox WorkCentre...CVE-2006-11365.0 MediumMarch 10, 2006
sblogMultiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to...CVE-2006-1135Public exploit4.3 MediumMarch 10, 2006
jason smith cyboards php liteSQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows...CVE-2006-11345.1 MediumMarch 10, 2006
vbzoomMultiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to...CVE-2006-1133Public exploit4.3 MediumMarch 10, 2006
vbzoomSQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute...CVE-2006-1132Public exploit7.5 HighMarch 10, 2006
bitweaverCross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote...CVE-2006-1131Public exploit4.3 MediumMarch 10, 2006
ekinboardCross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject...CVE-2006-11304.3 MediumMarch 10, 2006
ekinboardSQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute...CVE-2006-11297.5 HighMarch 10, 2006
ibm aixlscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack.CVE-2006-06674.6 MediumMarch 10, 2006
gnome evolutionGNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and...CVE-2006-0040Fix available5.0 MediumMarch 10, 2006
gnu privacy guardgpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows...CVE-2006-0049Fix available5.0 MediumMarch 10, 2006
gallery project galleryDirectory traversal vulnerability in the session handling class (GallerySession.class) in Gallery...CVE-2006-1128Public exploit6.4 MediumMarch 9, 2006
gallery project galleryCross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to...CVE-2006-1127Public exploit4.3 MediumMarch 9, 2006
gallery project galleryGallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X...CVE-2006-11266.4 MediumMarch 9, 2006
grisoft avg antivirusGrisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control...CVE-2006-11254.6 MediumMarch 9, 2006
revilloc solutions mailserverBuffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute...CVE-2006-1124Public exploit7.5 HighMarch 9, 2006
d2ksoft d2kblogSQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute...CVE-2006-1123Public exploit10.0 HighMarch 9, 2006
d2ksoft d2kblogCross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows...CVE-2006-11226.8 MediumMarch 9, 2006
cutephp cutenewsCross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject...CVE-2006-1121Public exploit6.8 MediumMarch 9, 2006
codeworx technologies dcp-portalMultiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with...CVE-2006-1120Public exploit2.6 LowMarch 9, 2006
netenberg fantastico de luxefantastico in Cpanel does not properly handle when it has insufficient permissions to perform...CVE-2006-11194.0 MediumMarch 9, 2006
apache log4netApache log4net format string vulnerability causes DoSCVE-2006-0743Fix available5.0 MediumMarch 9, 2006
bmailSQL injection vulnerability in bmail before Aardvark PR9.1 allows remote attackers to execute...CVE-2006-11185.0 MediumMarch 9, 2006
ncipher dse200 document sealing engine, nethsm, nforce +5 more +7 morenCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5)...CVE-2006-11172.6 LowMarch 9, 2006
ncipher ncoreThe CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization...CVE-2006-11165.0 MediumMarch 9, 2006
ncipher chil, mscapi csp, software cd +2 morenCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any...CVE-2006-11152.6 LowMarch 9, 2006
gerrit van aaken loudblogMultiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to...CVE-2006-1114Public exploit6.4 MediumMarch 9, 2006
gerrit van aaken loudblogSQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to...CVE-2006-1113Public exploit5.0 MediumMarch 9, 2006
aztek forum forumAztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in...CVE-2006-1112Public exploit5.0 MediumMarch 9, 2006
aztek forum forumAztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg...CVE-2006-1111Public exploit7.5 HighMarch 9, 2006
aztek forum forumCross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject...CVE-2006-1110Public exploit4.3 MediumMarch 9, 2006
totalecommerceSQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to...CVE-2006-1109Public exploit7.5 HighMarch 9, 2006
nmdeluxeSQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to...CVE-2006-11087.5 HighMarch 9, 2006
nmdeluxeCross-site scripting (XSS) vulnerability in news.php in NMDeluxe before 1.0.1 allows remote...CVE-2006-11074.3 MediumMarch 9, 2006
pixelpostCross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote...CVE-2006-11064.3 MediumMarch 9, 2006
pixelpostPixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via...CVE-2006-11055.0 MediumMarch 9, 2006
pixelpostMultiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers...CVE-2006-11047.5 HighMarch 9, 2006
sauerbraten cube, sauerbraten +1 moreengine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote...CVE-2006-1103Public exploit5.0 MediumMarch 9, 2006
sauerbraten cube, sauerbraten +1 moreSauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a...CVE-2006-1102Public exploit5.0 MediumMarch 9, 2006
sauerbraten cube, sauerbraten +1 moreThe (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube...CVE-2006-1101Public exploit5.0 MediumMarch 9, 2006
sauerbraten cube, sauerbraten +1 moreBuffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier,...CVE-2006-1100Public exploit7.5 HighMarch 9, 2006
logitPHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute...CVE-2006-1099Public exploit7.5 HighMarch 9, 2006
digital builder nz ecommerce** DISPUTED ** Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to...CVE-2006-1098Public exploitDisputed7.5 HighMarch 9, 2006
datenbank module moduleMultiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab...CVE-2006-10974.3 MediumMarch 9, 2006
digital builder nz ecommerce** DISPUTED ** Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows...CVE-2006-1096Disputed4.3 MediumMarch 9, 2006
apache mod pythonDirectory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache...CVE-2006-10957.2 HighMarch 9, 2006
woltlab burning board, datenbank module module +1 moreSQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows...CVE-2006-1094Public exploit7.5 HighMarch 9, 2006
ibm websphere application serverUnspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9...CVE-2006-10936.4 MediumMarch 9, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open