Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
April

CVEs published in April 2006

576 vulnerabilities, 42 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

microsoft windows 2000, windows 2003 server, windows 98 +3 more +5 moreUnspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and...CVE-2006-0012EPSS 24.8%5.1 MediumApril 12, 2006
microsoft data access componentsUnspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX...CVE-2006-0003Public exploitEPSS 82.8%5.1 MediumApril 12, 2006
suche shopxsCross-site scripting (XSS) vulnerability in suche.htm in ShopXS 4.0 allows remote attackers to...CVE-2006-17226.8 MediumApril 11, 2006
cyrus sasldigestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and...CVE-2006-1721Fix available2.6 LowApril 11, 2006
arabless saphplessonCross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers...CVE-2006-17204.3 MediumApril 11, 2006
microsoft ieInternet Explorer 6 allows remote attackers to cause a denial of service (application crash) via...CVE-2006-1719EPSS 13.9%5.0 MediumApril 11, 2006
clever copy copyMagus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with...CVE-2006-1718Public exploit5.0 MediumApril 11, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in newthread.php in MyBB (aka MyBulletinBoard) 1.10,...CVE-2006-17175.1 MediumApril 11, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard)...CVE-2006-17165.1 MediumApril 11, 2006
tugzipMultiple directory traversal vulnerabilities in Christian Kindahl TUGZip 3.4.0.0, 3.3.0.0, and 3...CVE-2006-17155.0 MediumApril 11, 2006
phpmyforumCRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote...CVE-2006-1714Public exploit7.5 HighApril 11, 2006
phpmyforumCross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows...CVE-2006-1713Public exploit6.8 MediumApril 11, 2006
microsoft internet explorer, canon network camera server vb101, microsoft ie +2 moreMicrosoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by...CVE-2006-1192Public exploitEPSS 31.7%2.6 LowApril 11, 2006
microsoft internet explorerMicrosoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is...CVE-2006-1191Public exploitEPSS 31.9%4.0 MediumApril 11, 2006
microsoft internet explorerMicrosoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite...CVE-2006-1190Public exploitEPSS 61.6%10.0 HighApril 11, 2006
microsoft internet explorerBuffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote...CVE-2006-1189Public exploitEPSS 61.7%10.0 HighApril 11, 2006
microsoft internet explorer, canon network camera server vb101, microsoft ie +2 moreMicrosoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via...CVE-2006-1188Public exploitEPSS 57.6%7.5 HighApril 11, 2006
microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via...CVE-2006-1186Public exploitEPSS 58.3%10.0 HighApril 11, 2006
microsoft ie, internet explorer, canon network camera server vb101 +2 moreUnspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers...CVE-2006-1185Public exploitEPSS 70.3%7.5 HighApril 11, 2006
microsoft frontpage server extensions, sharepoint team services +1 moreCross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage...CVE-2006-0015Public exploitEPSS 24.6%6.8 MediumApril 11, 2006
gnu mailmanCross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU...CVE-2006-17122.6 LowApril 11, 2006
plonePlone allows remote users to modify arbitrary portraitsCVE-2006-1711Public exploitFix available5.0 MediumApril 11, 2006
design nation dnguestbookSQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers...CVE-2006-1710Public exploit7.6 HighApril 11, 2006
interaktiv interaktiv.shopCross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote...CVE-2006-1709Public exploit6.8 MediumApril 11, 2006
clansysSQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute...CVE-2006-1708Public exploit7.5 HighApril 11, 2006
kansok communications shopweezleindex.php in Shopweezle 2.0 allows remote attackers to include arbitrary local files via the url...CVE-2006-17075.0 MediumApril 11, 2006
kansok communications shopweezleMultiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute...CVE-2006-1706Public exploit7.5 HighApril 11, 2006
oracle oracle10g, oracle9i +1 moreOracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table...CVE-2006-17052.1 LowApril 11, 2006
hubert plisson sireSire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a...CVE-2006-1704Public exploit5.0 MediumApril 11, 2006
hubert plisson sirePHP remote file inclusion vulnerability in lire.php in Sire 2.0 nws allows remote attackers to...CVE-2006-17037.5 HighApril 11, 2006
spipPHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers...CVE-2006-1702Public exploitFix available7.5 HighApril 11, 2006
shadowed portal portalCross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote...CVE-2006-1701Public exploit2.6 LowApril 11, 2006
aweb scripts sellerBuy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and...CVE-2006-17007.5 HighApril 11, 2006
aweb banner generatorCross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier...CVE-2006-1699Public exploit2.6 LowApril 11, 2006
matt wright guestbookCross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers...CVE-2006-16984.3 MediumApril 11, 2006
matt wright guestbookCross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers...CVE-2006-1697Public exploit4.3 MediumApril 11, 2006
gallery project galleryCross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to...CVE-2006-16964.3 MediumApril 11, 2006
fbidaThe fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined,...CVE-2006-1695Fix available1.2 LowApril 11, 2006
xbrite membersSQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote...CVE-2006-1694Public exploit7.5 HighApril 11, 2006
globalscape secure ftp serverUnspecified vulnerability in GlobalSCAPE Secure FTP Server before 3.1.4 Build 01.10.2006 allows...CVE-2006-16935.0 MediumApril 11, 2006
manic web mwnewsletterMultiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute...CVE-2006-16927.5 HighApril 11, 2006
manic web mwnewsletterSQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary...CVE-2006-16917.5 HighApril 11, 2006
manic web mwnewsletterCross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote...CVE-2006-16906.8 MediumApril 11, 2006
xzgvHeap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted...CVE-2006-1060Fix available7.5 HighApril 11, 2006
hp hp-uxUnspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows...CVE-2006-16897.2 HighApril 10, 2006
squeryMultiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products...CVE-2006-1688Public exploit7.5 HighApril 10, 2006
apt apt-webshop-systemCross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT...CVE-2006-16874.3 MediumApril 10, 2006
apt apt-webshop-systemUnspecified vulnerability in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT...CVE-2006-16865.0 MediumApril 10, 2006
apt apt-webshop-systemMultiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC,...CVE-2006-1685Public exploit7.5 HighApril 10, 2006
ecotwo shopsystemUnspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to...CVE-2006-16845.0 MediumApril 10, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open