Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
April

CVEs published in April 2006

576 vulnerabilities, 42 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

4homepages 4imagesCross-site scripting (XSS) vulnerability in member.php in 4images 1.7 and earlier allows remote...CVE-2006-20112.6 LowApril 25, 2006
paras chopra bloggageMultiple SQL injection vulnerabilities in check_login.asp in Bloggage allow remote attackers to...CVE-2006-20107.5 HighApril 25, 2006
phpmyagendaPHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier...CVE-2006-20097.5 HighApril 25, 2006
built2go movie reviewPHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and...CVE-2006-2008Public exploit7.5 HighApril 25, 2006
winnyHeap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute...CVE-2006-20077.5 HighApril 25, 2006
ivan zahariev izarcMultiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers...CVE-2006-20065.0 MediumApril 25, 2006
clansysEval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute...CVE-2006-2005Public exploit7.5 HighApril 25, 2006
michael romedahl ri blogMultiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary...CVE-2006-20047.5 HighApril 25, 2006
community architect guestbookCross-site scripting (XSS) vulnerability in cgi-bin/guest in Community Architect Guestbook allows...CVE-2006-20034.3 MediumApril 25, 2006
mygamingladderPHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote...CVE-2006-2002Public exploit5.0 MediumApril 25, 2006
scry gallery galleryCross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers...CVE-2006-2001Public exploit4.3 MediumApril 25, 2006
logmethodsCross-site scripting (XSS) vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote...CVE-2006-20004.3 MediumApril 25, 2006
openttdThe multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a...CVE-2006-1999Public exploit5.0 MediumApril 25, 2006
openttdOpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via...CVE-2006-1998Public exploit2.1 LowApril 25, 2006
sybase pylon anywhereUnspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0...CVE-2006-19972.1 LowApril 25, 2006
scry gallery galleryScry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p...CVE-2006-19965.0 MediumApril 25, 2006
scry gallery galleryDirectory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to...CVE-2006-1995Public exploit5.0 MediumApril 25, 2006
dforumPHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to...CVE-2006-1994Public exploit7.5 HighApril 25, 2006
mozilla firefoxMozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of...CVE-2006-1993Public exploitFix availableEPSS 54.0%5.1 MediumApril 25, 2006
ethereal group etherealUnspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a...CVE-2006-19405.0 MediumApril 25, 2006
ethereal group etherealMultiple unspecified vulnerabilities in Ethereal 0.9.x up to 0.10.14 allow remote attackers to...CVE-2006-19395.0 MediumApril 25, 2006
ethereal group etherealMultiple unspecified vulnerabilities in Ethereal 0.8.x up to 0.10.14 allow remote attackers to...CVE-2006-19385.0 MediumApril 25, 2006
ethereal group etherealMultiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to...CVE-2006-19375.0 MediumApril 25, 2006
ethereal group etherealBuffer overflow in Ethereal 0.8.5 up to 0.10.14 allows remote attackers to execute arbitrary code...CVE-2006-19365.0 MediumApril 25, 2006
ethereal group etherealBuffer overflow in Ethereal 0.9.15 up to 0.10.14 allows remote attackers to cause a denial of...CVE-2006-19355.0 MediumApril 25, 2006
ethereal group etherealMultiple buffer overflows in Ethereal 0.10.x up to 0.10.14 allow remote attackers to cause a...CVE-2006-19345.0 MediumApril 25, 2006
ethereal group etherealMultiple unspecified vulnerabilities in Ethereal 0.10.x up to 0.10.14 allow remote attackers to...CVE-2006-19335.0 MediumApril 25, 2006
ethereal group etherealOff-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact...CVE-2006-193210.0 HighApril 25, 2006
microsoft internet explorermshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to...CVE-2006-1992Public exploitEPSS 40.8%2.6 LowApril 25, 2006
symantec antivirus scan engineSymantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log...CVE-2006-02325.0 MediumApril 25, 2006
symantec antivirus scan engineSymantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private...CVE-2006-02316.4 MediumApril 25, 2006
symantec antivirus scan engineSymantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side...CVE-2006-0230Public exploitEPSS 16.5%10.0 HighApril 25, 2006
abc2psMultiple buffer overflows in abc2ps before 1.3.3 allow user-assisted attackers to execute...CVE-2006-1513Fix available5.1 MediumApril 25, 2006
phpThe substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause...CVE-2006-19916.4 MediumApril 24, 2006
phpInteger overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context...CVE-2006-1990EPSS 10.6%5.0 MediumApril 24, 2006
winagents tftp serverDirectory traversal vulnerability in WinAgents TFTP Server for Windows 3.1 and earlier allows...CVE-2006-19525.0 MediumApril 24, 2006
solarwinds tftp serverDirectory traversal vulnerability in SolarWinds TFTP Server 8.1 and earlier allows remote...CVE-2006-19515.0 MediumApril 24, 2006
gnome gdmRace condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a...CVE-2006-1057Fix available3.7 LowApril 24, 2006
beagle project beagleArgument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary...CVE-2006-1865Fix available7.5 HighApril 21, 2006
apple safariThe WebTextRenderer(WebInternal) _CG_drawRun:style:geometry: function in Apple Safari 2.0.3...CVE-2006-19885.0 MediumApril 21, 2006
apple safariApple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code...CVE-2006-19877.5 HighApril 21, 2006
apple safariApple Safari 2.0.3 allows remote attackers to cause a denial of service and possibly execute code...CVE-2006-19867.5 HighApril 21, 2006
apple mac os x, mac os x server, safari +2 moreHeap-based buffer overflow in BOM BOMArchiveHelper 10.4 (6.3) Build 312, as used in Mac OS X 10.4...CVE-2006-1985Public exploitEPSS 13.9%5.1 MediumApril 21, 2006
apple mac os x, mac os x server +1 moreUnspecified vulnerability in the _cg_TIFFSetField function in Mac OS X 10.4.6 and earlier, as...CVE-2006-19845.0 MediumApril 21, 2006
apple mac os x, mac os x server +1 moreMultiple heap-based buffer overflows in Mac OS X 10.4.6 and earlier allow remote attackers to...CVE-2006-19836.4 MediumApril 21, 2006
apple mac os x, mac os x server +1 moreHeap-based buffer overflow in the LZWDecodeVector function in Mac OS X before 10.4.6, as used in...CVE-2006-1982Public exploitEPSS 19.9%7.5 HighApril 21, 2006
apple mac os x, mac os x server +1 moreUnspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send...CVE-2006-19812.1 LowApril 21, 2006
w2b online bankingCross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject...CVE-2006-1980Public exploit2.6 LowApril 21, 2006
manic web mwguestCross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote...CVE-2006-1979Public exploit5.8 MediumApril 21, 2006
flexbbSQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers...CVE-2006-1978Public exploit7.5 HighApril 21, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open