Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
May

CVEs published in May 2006

582 vulnerabilities, 14 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

id software quake 3 engineDirectory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena,...CVE-2006-2082Fix available7.5 HighMay 10, 2006
keyvan1.com edirectoryproSQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote...CVE-2006-2296Public exploit6.4 MediumMay 9, 2006
timobraun dynamic galerieDirectory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access...CVE-2006-2295Public exploit7.5 HighMay 9, 2006
timobraun dynamic galerieCross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject...CVE-2006-2294Public exploit6.8 MediumMay 9, 2006
expinion.net multicalendarsSQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to...CVE-2006-2293Public exploit6.4 MediumMay 9, 2006
inhouse associates ia-calendarMultiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary...CVE-2006-22926.4 MediumMay 9, 2006
inhouse associates ia-calendarCross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote...CVE-2006-22915.8 MediumMay 9, 2006
www.goel.ch 2005-comments-scriptMultiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script...CVE-2006-22906.8 MediumMay 9, 2006
avahiBuffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code...CVE-2006-2289Fix available2.1 LowMay 9, 2006
avahiAvahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service...CVE-2006-2288Fix available3.6 LowMay 9, 2006
vision source cmsMultiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote...CVE-2006-22875.8 MediumMay 9, 2006
dokeos, dokeos community release +1 moreMultiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3...CVE-2006-22866.8 MediumMay 9, 2006
dokeos open source learning and knowledge management toolPHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers...CVE-2006-2285Public exploit5.1 MediumMay 9, 2006
claroline, dokeos +1 moreMultiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to...CVE-2006-2284Public exploit6.8 MediumMay 9, 2006
spiffyjr phpraidMultiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow...CVE-2006-22837.5 HighMay 9, 2006
x7 group chatCross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to...CVE-2006-22824.3 MediumMay 9, 2006
x-scripts x-pollX-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using...CVE-2006-22817.5 HighMay 9, 2006
openengineDirectory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows...CVE-2006-2280Public exploit5.0 MediumMay 9, 2006
arabless saphplessonMultiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute...CVE-2006-22797.5 HighMay 9, 2006
arabless saphplessonSaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the...CVE-2006-22785.0 MediumMay 9, 2006
apple mac os xMultiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a...CVE-2006-2277Public exploit5.0 MediumMay 9, 2006
quaggabgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU...CVE-2006-22764.9 MediumMay 9, 2006
microsoft distributed transaction coordinator, windows nt, windows 2000 +2 more +4 moreMicrosoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and...CVE-2006-1184EPSS 30.1%5.0 MediumMay 9, 2006
cisco secure access control serverCisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and...CVE-2006-05617.2 HighMay 9, 2006
microsoft distributed transaction coordinator, windows 2000, windows nt +2 more +4 moreHeap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for...CVE-2006-0034EPSS 31.7%7.5 HighMay 9, 2006
microsoft exchange serverUnspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code...CVE-2006-0027EPSS 78.1%7.5 HighMay 9, 2006
canonical ubuntu linux, lksctp stream control transmission protocol +1 moreLinux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock)...CVE-2006-22757.5 HighMay 9, 2006
lksctp stream control transmission protocolLinux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite...CVE-2006-22745.0 MediumMay 9, 2006
adobe dreamweaverAdobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks...CVE-2006-20427.5 HighMay 9, 2006
lksctp stream control transmission protocolLinux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel...CVE-2006-22727.8 HighMay 9, 2006
lksctpThe ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a...CVE-2006-22717.8 HighMay 9, 2006
jetbox cmsPHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote...CVE-2006-2270Public exploitEPSS 14.5%7.5 HighMay 9, 2006
mywebland mybloggieCross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote...CVE-2006-2269Public exploit4.3 MediumMay 9, 2006
flexcustomerSQL injection vulnerability in FlexCustomer 0.0.4 and earlier allows remote attackers to bypass...CVE-2006-22687.5 HighMay 9, 2006
kerio winroute firewallKerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service ...CVE-2006-22675.0 MediumMay 9, 2006
chirpySQL injection vulnerability in Chirpy! 0.1 allows remote attackers to execute arbitrary SQL...CVE-2006-22667.5 HighMay 9, 2006
ocean12 technologies calendar manager proCross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows...CVE-2006-2265Public exploit2.6 LowMay 9, 2006
ocean12 technologies calendar manager proMultiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote...CVE-2006-2264Public exploit6.5 MediumMay 9, 2006
virtual programming vp-aspSQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute...CVE-2006-2263Public exploit7.5 HighMay 9, 2006
singaporeCross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers...CVE-2006-2262Public exploit2.6 LowMay 9, 2006
acalPHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to...CVE-2006-2261Public exploit7.5 HighMay 9, 2006
drupalCross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and...CVE-2006-22604.3 MediumMay 9, 2006
maxxcode maxxscheduleSQL injection vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to execute...CVE-2006-22597.5 HighMay 9, 2006
maxxcode maxxscheduleCross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers...CVE-2006-22582.6 LowMay 9, 2006
faktorystudios easyeventCross-site scripting (XSS) vulnerability in index.php in easyEvent 1.2 allows remote attackers to...CVE-2006-22575.8 MediumMay 9, 2006
eqdkpPHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows...CVE-2006-2256Public exploit6.4 MediumMay 9, 2006
creative software community portalMultiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote...CVE-2006-2255Public exploit7.5 HighMay 9, 2006
intervations filecopaBuffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of...CVE-2006-2254Public exploit5.0 MediumMay 9, 2006
otterware statitPHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows...CVE-2006-2253Public exploit7.5 HighMay 9, 2006
openfaqCross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to...CVE-2006-2252Public exploit6.4 MediumMay 9, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open