Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
April

CVEs published in April 2006

576 vulnerabilities, 42 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

freebsd, linux kernel +1 moreThe Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and...CVE-2006-10562.1 LowApril 20, 2006
linux kernelip_route_input in Linux kernel 2.6 before 2.6.16.8 allows local users to cause a denial of...CVE-2006-15254.9 MediumApril 19, 2006
linux kernelmadvise_remove in Linux kernel 2.6.16 up to 2.6.16.6 does not follow file and mmap restrictions,...CVE-2006-15243.6 LowApril 19, 2006
bluepay manager** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in BluePay Manager 2.0 and...CVE-2006-1854Disputed2.6 LowApril 19, 2006
moderngigabyte modernbillMultiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or...CVE-2006-1853Public exploit6.5 MediumApril 19, 2006
scriptsfrenzy article publisher proSQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows...CVE-2006-1852Public exploit7.5 HighApril 19, 2006
skymarx solutions xflowxFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the...CVE-2006-18515.0 MediumApril 19, 2006
skymarx solutions xflowMultiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote...CVE-2006-1850Public exploit2.6 LowApril 19, 2006
skymarx solutions xflowMultiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier...CVE-2006-1849Public exploit7.5 HighApril 19, 2006
linphaMultiple cross-site scripting (XSS) vulnerabilities in stats_view.php in LinPHA 1.1.0 allow...CVE-2006-18482.6 LowApril 19, 2006
francisco burzi php-nukeSQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote...CVE-2006-18477.5 HighApril 19, 2006
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows...CVE-2006-18464.3 MediumApril 19, 2006
debian base-config, shadow +1 moreThe Debian installer for the (1) shadow 4.0.14 and (2) base-config 2.53.10 packages includes...CVE-2006-1844Fix available2.1 LowApril 19, 2006
cynical games shoutbookCross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers...CVE-2006-18432.6 LowApril 19, 2006
cynical games shoutbookCross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers...CVE-2006-18422.6 LowApril 19, 2006
kailash nadh boastmachineCross-site scripting (XSS) vulnerability in search.php in boastMachine (bMachine) 2.7, and...CVE-2006-18412.6 LowApril 19, 2006
empire server serverMultiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a...CVE-2006-18406.4 MediumApril 19, 2006
php album albumPHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when...CVE-2006-1839Public exploit7.5 HighApril 19, 2006
clanscripte.net fuju newsedit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting...CVE-2006-1838Public exploit7.5 HighApril 19, 2006
clanscripte.net fuju newsSQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute...CVE-2006-1837Public exploit7.5 HighApril 19, 2006
symantec liveupdate, norton antivirus, norton internet security +3 more +5 moreUntrusted search path vulnerability in unspecified components in Symantec LiveUpdate for...CVE-2006-18366.8 MediumApril 19, 2006
vincent hor calendarix, calendarix advanced +1 moreCross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to...CVE-2006-1835Public exploit2.6 LowApril 19, 2006
opera browserInteger signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code...CVE-2006-1834Public exploitEPSS 12.4%5.1 MediumApril 19, 2006
netbsdIntel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb...CVE-2006-18332.6 LowApril 19, 2006
coder-world sysinfosysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the...CVE-2006-1832Public exploit5.0 MediumApril 19, 2006
coder-world sysinfoDirect static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other...CVE-2006-1831Public exploit7.5 HighApril 19, 2006
sun java studio enterpriseSun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable...CVE-2006-18303.7 LowApril 19, 2006
sybase easerverEAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly...CVE-2006-18294.0 MediumApril 19, 2006
php121 instant messengerSQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to...CVE-2006-1828Public exploit5.1 MediumApril 19, 2006
ibm aixrm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite...CVE-2006-12473.3 LowApril 19, 2006
digium asteriskInteger signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers...CVE-2006-1827Fix available6.4 MediumApril 18, 2006
snipegallery snipe galleryMultiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier allow...CVE-2006-18264.3 MediumApril 18, 2006
phplinksCross-site scripting (XSS) vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows...CVE-2006-1825Public exploit6.8 MediumApril 18, 2006
phpguestbookMultiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow...CVE-2006-18241.2 LowApril 18, 2006
farsinewsDirectory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to...CVE-2006-18236.4 MediumApril 18, 2006
farsinewsCross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows...CVE-2006-1822Public exploit5.8 MediumApril 18, 2006
modxcmsDirectory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read...CVE-2006-1821Public exploit6.4 MediumApril 18, 2006
modxcmsCross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to...CVE-2006-1820Public exploit5.8 MediumApril 18, 2006
phpwebsiteDirectory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2...CVE-2006-18197.5 HighApril 18, 2006
the war forge warforge.newsMultiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers...CVE-2006-18182.6 LowApril 18, 2006
the war forge warforge.newsSQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled...CVE-2006-18172.6 LowApril 18, 2006
jelsoft vbulletinPHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote...CVE-2006-18165.0 MediumApril 18, 2006
tritanium scripts bulletin boardMultiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board ...CVE-2006-18152.6 LowApril 18, 2006
netbsdNetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service (memory exhaustion)...CVE-2006-18142.1 LowApril 18, 2006
phpwebftpDirectory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote...CVE-2006-18136.4 MediumApril 18, 2006
phpwebftpphpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access...CVE-2006-18126.4 MediumApril 18, 2006
flexbbMultiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute...CVE-2006-18116.4 MediumApril 18, 2006
flexbbMultiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers...CVE-2006-18101.9 LowApril 18, 2006
lifetypeindex.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an...CVE-2006-18095.0 MediumApril 18, 2006
lifetypeCross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers...CVE-2006-1808Public exploit2.6 LowApril 18, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open