Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
May

CVEs published in May 2006

582 vulnerabilities, 14 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

oasyssoft e-business designerE-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify arbitrary...CVE-2006-23496.8 MediumMay 12, 2006
oasyssoft e-business designerCross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4...CVE-2006-23482.6 LowMay 12, 2006
oasyssoft e-business designerE-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full path of...CVE-2006-23475.0 MediumMay 12, 2006
inter7 vpopmail \(vchkpw\)vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to...CVE-2006-23467.5 HighMay 12, 2006
roostercode ajax softwares alipagerCross-site scripting (XSS) vulnerability in inc/elementz.php in AliPAGER 1.5 allows remote...CVE-2006-23454.3 MediumMay 12, 2006
ajax softwares alipagerSQL injection vulnerability in inc/elementz.php in AliPAGER 1.5, with magic_quotes_gpc disabled,...CVE-2006-23446.4 MediumMay 12, 2006
adventnet manageengine opmanagerCross-site scripting (XSS) vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote...CVE-2006-23435.8 MediumMay 12, 2006
ibm websphere application serverIBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass...CVE-2006-23427.5 HighMay 12, 2006
symantec enterprise firewall, gateway security +1 moreThe HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8...CVE-2006-2341Public exploit5.0 MediumMay 12, 2006
lethal penguin passmasterflex, passmasterflexplus +1 moreCross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex...CVE-2006-23405.8 MediumMay 12, 2006
evo-dev evotopsites, evotopsites pro +1 moreSQL injection vulnerability in index.php in evoTopsites 2.x and evoTopsites Pro 2.x allows remote...CVE-2006-2339Public exploit6.4 MediumMay 12, 2006
linux kernellease_init in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to cause a denial of...CVE-2006-18602.1 LowMay 12, 2006
linux kernelMemory leak in __setlease in fs/locks.c in Linux kernel before 2.6.16.16 allows attackers to...CVE-2006-18592.1 LowMay 12, 2006
planet concept planetstatPlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and...CVE-2006-23387.5 HighMay 12, 2006
d-link dsl-g604tDirectory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem...CVE-2006-23375.0 MediumMay 12, 2006
mybulletinboardSQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote...CVE-2006-2336Public exploit6.4 MediumMay 12, 2006
jelsoft vbulletinJelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way...CVE-2006-23356.5 MediumMay 12, 2006
microsoft windows 2000, windows xp +1 moreThe RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP...CVE-2006-2334Public exploit2.1 LowMay 12, 2006
mybulletinboardMultiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) 1.1.1 allow remote attackers...CVE-2006-23336.4 MediumMay 12, 2006
mozilla firefoxMozilla Firefox 1.5.0.3 allows remote attackers to cause a denial of service via a web page with...CVE-2006-23322.6 LowMay 12, 2006
php fusion fusionMultiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to...CVE-2006-2331Public exploit6.4 MediumMay 12, 2006
php fusion fusionPHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows...CVE-2006-2330Public exploit6.4 MediumMay 12, 2006
angelinecmsAngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct...CVE-2006-23295.0 MediumMay 12, 2006
angelinecmsSQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow...CVE-2006-23286.4 MediumMay 12, 2006
novell netwareMultiple integer overflows in the DPRPC library (DPRPCNLM.NLM) NDPS/iPrint module in Novell...CVE-2006-23276.4 MediumMay 12, 2006
onlyscript.info online universal payment system scriptDirectory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System...CVE-2006-23265.0 MediumMay 12, 2006
onlyscript.info online universal payment system scriptCross-site scripting (XSS) vulnerability in index.php in OnlyScript.info Online Universal Payment...CVE-2006-23256.8 MediumMay 12, 2006
180solutions zango180solutions Zango downloads "required Adware components" without checking integrity or...CVE-2006-232410.0 HighMay 12, 2006
smartisoft phplistproMultiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier...CVE-2006-2323Public exploitEPSS 10.1%5.1 MediumMay 12, 2006
cisco application velocity system 3110, application velocity system 3120 +1 moreThe transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and...CVE-2006-23226.4 MediumMay 12, 2006
ideal science idealbbMultiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier...CVE-2006-23214.3 MediumMay 12, 2006
ideal science idealbbMultiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote...CVE-2006-23207.5 HighMay 12, 2006
ideal science idealbbIdeal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before...CVE-2006-23195.0 MediumMay 12, 2006
ideal science idealbbIncomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote...CVE-2006-23187.5 HighMay 12, 2006
ideal science idealbbUnspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to...CVE-2006-23175.0 MediumMay 12, 2006
intel proset wirelessS24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a...CVE-2006-2316Public exploit4.9 MediumMay 12, 2006
ispconfig** DISPUTED ** PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and...CVE-2006-2315Public exploitDisputed7.5 HighMay 12, 2006
verisign i-navThe InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not...CVE-2006-22739.3 HighMay 12, 2006
website baker bakerCross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote...CVE-2006-23074.3 MediumMay 11, 2006
keyvan janghorbani epublisherproCross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers...CVE-2006-2306Public exploit9.3 HighMay 11, 2006
jadu limited cmsMultiple cross-site scripting (XSS) vulnerabilities in Jadu CMS allow remote attackers to inject...CVE-2006-23055.8 MediumMay 11, 2006
novell clientMultiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90...CVE-2006-230410.0 HighMay 11, 2006
mirabilis icqCross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows...CVE-2006-23036.4 MediumMay 11, 2006
duware dugallerySQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to...CVE-2006-23027.5 HighMay 11, 2006
ozzywork galeriSQL injection vulnerability in admin_default.asp in OzzyWork Galeri allows remote attackers to...CVE-2006-23017.5 HighMay 11, 2006
keyvan1 eimageproMultiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary...CVE-2006-2300Public exploit7.5 HighMay 11, 2006
internet key exchange key exchangeThe Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and...CVE-2006-22985.0 MediumMay 10, 2006
sophos anti-virusMultiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x...CVE-2006-0994EPSS 21.6%7.5 HighMay 10, 2006
microsoft infotech storage system libraryHeap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user...CVE-2006-2297Public exploitEPSS 19.5%4.0 MediumMay 10, 2006
3com tippingpoint sms serverThe web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict...CVE-2006-09935.0 MediumMay 10, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open