Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
March

CVEs published in March 2006

542 vulnerabilities, 23 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

musicboxMultiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute...CVE-2006-13607.5 HighMarch 23, 2006
novell netware, open enterprise server +1 moreThe SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server...CVE-2006-09995.0 MediumMarch 23, 2006
novell netware, open enterprise server +1 moreThe SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server...CVE-2006-09985.0 MediumMarch 23, 2006
novell netware, open enterprise server +1 moreThe SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server...CVE-2006-09975.0 MediumMarch 23, 2006
freebsd, netbsd +1 moreA "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2...CVE-2006-09057.5 HighMarch 23, 2006
microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service...CVE-2006-1359Public exploitEPSS 68.3%9.3 HighMarch 23, 2006
linux kernelLinux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled,...CVE-2006-10661.2 LowMarch 23, 2006
sendmailSignal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute...CVE-2006-0058Public exploitFix availableEPSS 28.7%7.6 HighMarch 22, 2006
linux kernelInteger overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using ...CVE-2006-00386.9 MediumMarch 22, 2006
oracle weblogic portalUnspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be...CVE-2006-13585.0 MediumMarch 22, 2006
f5 firepass 4100Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2...CVE-2006-1357Public exploit4.3 MediumMarch 22, 2006
andrew hsu libvc, rolo +1 moreStack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user...CVE-2006-1356Public exploitFix available5.1 MediumMarch 22, 2006
alwil avast antivirusavast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files...CVE-2006-13557.2 HighMarch 22, 2006
freeradiusUnspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass...CVE-2006-1354Fix available7.5 HighMarch 22, 2006
aspportalMultiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to...CVE-2006-1353Public exploit7.5 HighMarch 22, 2006
bea weblogic serverBEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic...CVE-2006-13525.0 MediumMarch 22, 2006
bea weblogic serverBEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via...CVE-2006-13515.0 MediumMarch 22, 2006
articlesone 99articles directoryPHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free...CVE-2006-13507.5 HighMarch 22, 2006
musicboxMultiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers...CVE-2006-1349Public exploit4.3 MediumMarch 22, 2006
greg neustaetter gcardsCross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier...CVE-2006-1348Public exploit4.3 MediumMarch 22, 2006
greg neustaetter gcardsSQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier...CVE-2006-1347Public exploit7.5 HighMarch 22, 2006
greg neustaetter gcardsDirectory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier...CVE-2006-1346Public exploit6.4 MediumMarch 22, 2006
mybulletinboardpolls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive...CVE-2006-13455.0 MediumMarch 22, 2006
verisign mpkiCross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0...CVE-2006-1344Public exploit4.3 MediumMarch 22, 2006
debian linuxsnmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on...CVE-2006-0050Fix available1.2 LowMarch 22, 2006
linux kernelnet/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4...CVE-2006-13432.1 LowMarch 21, 2006
linux kernelnet/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4...CVE-2006-1342Public exploit2.1 LowMarch 21, 2006
maian events eventsSQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute...CVE-2006-13417.5 HighMarch 21, 2006
cutephp cutenewsCuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation...CVE-2006-13405.0 MediumMarch 21, 2006
cutephp cutenewsDirectory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other...CVE-2006-13395.0 MediumMarch 21, 2006
mailenable enterprise, professional +1 moreWebmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows...CVE-2006-13385.0 MediumMarch 21, 2006
mailenableBuffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93,...CVE-2006-13377.5 HighMarch 21, 2006
extcalendarCross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions...CVE-2006-1336Public exploit5.0 MediumMarch 21, 2006
x.org x11r6, x11r7, mandrakesoft mandrake linux +3 more +5 moreX.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the...CVE-2006-0745Public exploitFix available7.2 HighMarch 21, 2006
gnome screensavergnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and...CVE-2006-1335Fix available3.7 LowMarch 21, 2006
maian script world weblogMultiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute...CVE-2006-1334Public exploit6.4 MediumMarch 21, 2006
betaparticle blogMultiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote...CVE-2006-1333Public exploit6.4 MediumMarch 21, 2006
phpoutsourcing noahs classifiedsNoah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an...CVE-2006-13326.4 MediumMarch 21, 2006
phpoutsourcing noahs classifiedsMultiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and...CVE-2006-13316.8 MediumMarch 21, 2006
phpwebsiteMultiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to...CVE-2006-1330Public exploit7.5 HighMarch 21, 2006
jabberstudio jabberdThe SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a...CVE-2006-1329Fix available5.0 MediumMarch 21, 2006
skull-splitter download counter wallpaperSQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0...CVE-2006-13285.0 MediumMarch 21, 2006
softbbSQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary...CVE-2006-1327Public exploit7.5 HighMarch 21, 2006
invision power services power boardMultiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote...CVE-2006-1326Public exploit4.3 MediumMarch 21, 2006
streberCross-site scripting (XSS) vulnerability in Streber 0.055 allows remote attackers to inject...CVE-2006-13256.8 MediumMarch 21, 2006
woltlab burning boardCross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board ...CVE-2006-1324Public exploit6.8 MediumMarch 21, 2006
webtoolmaster software winhkiDirectory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to...CVE-2006-1323Public exploit5.1 MediumMarch 20, 2006
novell netware, netware ftp server +1 moreNovell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service (ABEND) via an...CVE-2006-13225.0 MediumMarch 20, 2006
webcheckCross-site scripting (XSS) vulnerability in webcheck before 1.9.6 allows remote attackers to...CVE-2006-13214.3 MediumMarch 20, 2006
rsshutil.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a...CVE-2006-1320Fix available7.5 HighMarch 20, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open