Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
March

CVEs published in March 2006

542 vulnerabilities, 23 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

micromuse netcool neusecureThe web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database...CVE-2006-12107.5 HighMarch 14, 2006
bugada andrea php advanced transfer managerPHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password...CVE-2006-1209Public exploit5.0 MediumMarch 14, 2006
sergey korostel php upload centerSergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by...CVE-2006-12087.5 HighMarch 14, 2006
sergey korostel php upload centerPHP Upload Center stores password hashes under the web root with insufficient access control,...CVE-2006-12075.0 MediumMarch 14, 2006
dropbear ssh project sshMatt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on...CVE-2006-1206Public exploitFix availableEPSS 11.7%5.0 MediumMarch 14, 2006
mywebland mybloggieMultiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier...CVE-2006-1205Public exploit4.3 MediumMarch 14, 2006
txtforumMultiple cross-site scripting (XSS) vulnerabilities in txtForum 1.0.4-dev and earlier allow...CVE-2006-12044.3 MediumMarch 14, 2006
txtforumPHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows...CVE-2006-12037.5 HighMarch 14, 2006
jcink.com textfilebbMultiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote...CVE-2006-1202Public exploit4.3 MediumMarch 14, 2006
eschew.net phpbannerexchangeDirectory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier,...CVE-2006-12015.0 MediumMarch 14, 2006
daverave link bankDirect static code injection vulnerability in add_link.txt in daverave Link Bank allows remote...CVE-2006-12007.5 HighMarch 14, 2006
daverave link bankCross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote...CVE-2006-1199Public exploit4.3 MediumMarch 14, 2006
comvigo im lockComvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs...CVE-2006-11983.7 LowMarch 14, 2006
macrovision safediscSafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which...CVE-2006-11977.2 HighMarch 13, 2006
david barrett qwikiwikiMultiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to...CVE-2006-1196Public exploit4.3 MediumMarch 13, 2006
enet libraryThe enet_protocol_handle_send_fragment function in protocol.c for ENet library CVS version Jul...CVE-2006-11955.0 MediumMarch 13, 2006
enet libraryInteger signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for...CVE-2006-1194Public exploit5.0 MediumMarch 13, 2006
unalzunalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with "....CVE-2006-0950Fix available2.6 LowMarch 13, 2006
gnome dwarf http serverCross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to...CVE-2006-08204.3 MediumMarch 13, 2006
gnome dwarf http serverDwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1)...CVE-2006-08197.8 HighMarch 13, 2006
ubuntu linuxThe Ubuntu 5.10 installer does not properly clear passwords from the installer log file ...CVE-2006-1183Public exploit7.2 HighMarch 13, 2006
monotoneMonotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when...CVE-2006-11663.7 LowMarch 12, 2006
andreas gohr dokuwikiCross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05...CVE-2006-1165Fix available4.3 MediumMarch 12, 2006
nodezNodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document...CVE-2006-1164Public exploit7.5 HighMarch 12, 2006
nodezCross-site scripting (XSS) vulnerability in Nodez 4.6.1.1 allows remote attackers to inject...CVE-2006-11636.8 MediumMarch 12, 2006
nodezDirectory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or...CVE-2006-1162Public exploit5.1 MediumMarch 12, 2006
efs software web serverAbsolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote...CVE-2006-1161Public exploit6.5 MediumMarch 12, 2006
efs software web serverCross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote...CVE-2006-11604.3 MediumMarch 12, 2006
efs software web serverFormat string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to...CVE-2006-1159Public exploit7.8 HighMarch 12, 2006
linux kernelsys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod...CVE-2006-05574.9 MediumMarch 12, 2006
kerio mailserverKerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service ...CVE-2006-11587.8 HighMarch 12, 2006
adp forumCross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote...CVE-2006-1157Public exploit4.3 MediumMarch 12, 2006
manas tungare site membership scriptSQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows...CVE-2006-11565.0 MediumMarch 12, 2006
manas tungare site membership scriptCross-site scripting (XSS) vulnerability in manas tungare Site Membership Script before 8 March,...CVE-2006-11554.3 MediumMarch 12, 2006
fscripts fantastic newsPHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote...CVE-2006-11547.5 HighMarch 10, 2006
d2-shoutboxSQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL...CVE-2006-1153Public exploit5.0 MediumMarch 10, 2006
m phorum phorumPHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to...CVE-2006-11525.0 MediumMarch 10, 2006
m phorum phorumCross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject...CVE-2006-1151Public exploit5.0 MediumMarch 10, 2006
teg tenes empanadas gracielaBuffer overflow in Tenes Empanadas Graciela (TEG) 0.11.1, automatically appends an _ (underscore)...CVE-2006-1150Fix available7.8 HighMarch 10, 2006
owl intranet enginePHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when...CVE-2006-1149Public exploit7.5 HighMarch 10, 2006
peercastMultiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast...CVE-2006-1148Public exploitEPSS 73.0%7.5 HighMarch 10, 2006
cor entertainment alien arena 2006The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly...CVE-2006-1147Public exploit4.0 MediumMarch 10, 2006
cor entertainment alien arena 2006Stack-based buffer overflow in the Cmd_Say_f function in g_cmds.c in Alien Arena 2006 Gold...CVE-2006-1146Public exploit6.5 MediumMarch 10, 2006
cor entertainment alien arena 2006Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006...CVE-2006-1145Public exploit6.5 MediumMarch 10, 2006
david ravenscroft hithostCross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject...CVE-2006-1144Public exploit2.6 LowMarch 10, 2006
ftpoed blog engineCross-site scripting (XSS) vulnerability in FTPoed Blog Engine 1.1 allows remote attackers to...CVE-2006-11434.3 MediumMarch 10, 2006
solido systems ravenous web serverUnspecified vulnerability in Ravenous Web Server before 0.7.1 allows remote attackers to access...CVE-2006-11425.0 MediumMarch 10, 2006
inter7 qmailadminBuffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute...CVE-2006-11417.5 HighMarch 10, 2006
redblogSQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute...CVE-2006-1140Public exploit7.5 HighMarch 10, 2006
xerox copycentre c65 firmware, copycentre c75 firmware, copycentre c90 firmware +3 more +5 moreUnspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre...CVE-2006-11396.4 MediumMarch 10, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open