Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
April

CVEs published in April 2006

576 vulnerabilities, 42 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

czaries network czarnewsCross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to...CVE-2006-16402.6 LowApril 6, 2006
wire plastik design wpblogSQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute...CVE-2006-16395.1 MediumApril 6, 2006
aweb labs awebbbMultiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary...CVE-2006-16385.1 MediumApril 6, 2006
aweb labs awebbbMultiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to...CVE-2006-16374.3 MediumApril 6, 2006
vwar virtual warPHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows...CVE-2006-16367.5 HighApril 6, 2006
lucidcmsLucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct request...CVE-2006-16355.0 MediumApril 6, 2006
lucidcmsCross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote...CVE-2006-1634Public exploit4.3 MediumApril 6, 2006
cisco content services switch 11500Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content...CVE-2006-16315.0 MediumApril 5, 2006
linux kernelThe fill_write_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6...CVE-2006-10554.9 MediumApril 5, 2006
microsoft internet explorerInternet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address...CVE-2006-1626Public exploitEPSS 25.5%4.3 MediumApril 5, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard)...CVE-2006-16256.8 MediumApril 5, 2006
linux kernelThe default configuration of syslogd in the Linux sysklogd package does not enable the -x ...CVE-2006-16247.8 HighApril 5, 2006
andries bruinsma flexible developmentUnspecified vulnerability in main.php in an unspecified "file created by Andries Bruinsma,"...CVE-2006-16234.3 MediumApril 5, 2006
phpselectCross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to...CVE-2006-16226.8 MediumApril 5, 2006
hosting controller controllerDirectory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002...CVE-2006-16214.0 MediumApril 5, 2006
hosting controller controlleradmin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to...CVE-2006-16205.0 MediumApril 5, 2006
ibm websphere application serverIBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of...CVE-2006-16195.0 MediumApril 5, 2006
doomsdayFormat string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in...CVE-2006-1618Public exploitEPSS 13.5%7.5 HighApril 5, 2006
advanced poll pollMultiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers...CVE-2006-16174.3 MediumApril 5, 2006
advanced poll pollMultiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute...CVE-2006-16167.5 HighApril 5, 2006
apple mac os x, mac os x server +1 moreUnspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer,...CVE-2006-04014.6 MediumApril 5, 2006
clam anti-virus clamavThe cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows...CVE-2006-1630Fix available5.0 MediumApril 5, 2006
clamavMultiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88...CVE-2006-1615Fix availableEPSS 11.6%10.0 HighApril 5, 2006
clam anti-virus clamavInteger overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam...CVE-2006-1614Fix available5.1 MediumApril 5, 2006
kaffeine playerBuffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted...CVE-2006-0051Fix available5.1 MediumApril 5, 2006
mcafee webshield smtpFormat string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows...CVE-2006-055910.0 HighApril 4, 2006
aweb labs awebnewsMultiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute...CVE-2006-1613Public exploit5.0 MediumApril 4, 2006
aweb labs awebnewsMultiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote...CVE-2006-16125.1 MediumApril 4, 2006
kgb archiverDirectory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to...CVE-2006-16115.0 MediumApril 4, 2006
squeryPHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in...CVE-2006-1610Public exploit5.1 MediumApril 4, 2006
hitachi xfit s, xfit s jca, xfit s zengin +1 more +3 moreUnspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP...CVE-2006-16095.0 MediumApril 4, 2006
exponent cmsUnspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php...CVE-2006-16077.5 HighApril 4, 2006
exponent cmsUnspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows ...CVE-2006-16065.0 MediumApril 4, 2006
exponent cmsUnspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote...CVE-2006-16057.5 HighApril 4, 2006
exponent cmsUnspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack...CVE-2006-160410.0 HighApril 4, 2006
phpbb group phpbbCross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers...CVE-2006-16034.3 MediumApril 4, 2006
phpnuke-clanPHP remote file inclusion vulnerability in includes/functions_common.php in the VWar Account...CVE-2006-16027.5 HighApril 4, 2006
sun clusterUnspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with...CVE-2006-16011.7 LowApril 4, 2006
busybox, avaya aura application enablement services, aura sip enablement services +2 more +4 moreBusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local...CVE-2006-1058Fix available5.5 MediumApril 4, 2006
phpwebgallerySQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to...CVE-2006-16007.5 HighApril 3, 2006
v-creator.com v-creatorUnspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VC_CRYPTO_METHOD...CVE-2006-15997.5 HighApril 3, 2006
an an-httpdAN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain...CVE-2006-15987.8 HighApril 3, 2006
andy grayndler andys php knowledgebaseMultiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57...CVE-2006-14386.8 MediumApril 3, 2006
accounting receiving and inventory administration ariaCross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory...CVE-2006-14356.8 MediumApril 3, 2006
annuaire directoryCross-site scripting (XSS) vulnerability in inscription.php in Annuaire (Directory) 1.0 allows...CVE-2006-14346.8 MediumApril 3, 2006
annuaire directoryAnnuaire (Directory) 1.0 allows remote attackers to obtain sensitive information via a direct...CVE-2006-14335.0 MediumApril 3, 2006
clarolinePHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7...CVE-2006-15967.5 HighApril 3, 2006
clarolineCross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier...CVE-2006-1595Public exploit4.3 MediumApril 3, 2006
clarolineMultiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and...CVE-2006-15947.5 HighApril 3, 2006
x-doom, zdaemon +1 moreThe (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp...CVE-2006-1593Public exploit5.0 MediumApril 3, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open