Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
May

CVEs published in May 2006

582 vulnerabilities, 14 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

linux kernelSCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash...CVE-2006-18587.8 HighMay 22, 2006
linux kernelBuffer overflow in SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a...CVE-2006-18579.0 HighMay 22, 2006
sun java system application server, java system web server, one application server +1 more +3 moreCross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System...CVE-2006-25016.8 MediumMay 20, 2006
xfairguy codeavalanche newsCross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2...CVE-2006-25006.8 MediumMay 20, 2006
xfairguy codeavalanche newsSQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote...CVE-2006-2499Public exploit7.5 HighMay 20, 2006
invision power services power boardInvision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script...CVE-2006-24986.4 MediumMay 20, 2006
aspbbMultiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to...CVE-2006-2497Public exploit5.8 MediumMay 20, 2006
novell edirectory, imonitor +1 moreBuffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a...CVE-2006-249610.0 HighMay 20, 2006
s9y serendipityCross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0...CVE-2006-24957.5 HighMay 20, 2006
lacaveprods intellitamperStack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary...CVE-2006-2494Public exploit5.1 MediumMay 20, 2006
microsoft office, word, works suite +2 moreBuffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and...CVE-2006-2492In KEVEPSS 48.1%8.8 HighMay 20, 2006
boastmachineCross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine ...CVE-2006-2491Public exploit6.8 MediumMay 19, 2006
mobotix ip network cameraMultiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and...CVE-2006-2490Public exploit4.3 MediumMay 19, 2006
nagiosInteger overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote...CVE-2006-24897.5 HighMay 19, 2006
spymac web osMultiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote...CVE-2006-24884.3 MediumMay 19, 2006
scoznet scoznewsMultiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote...CVE-2006-2487Public exploit7.5 HighMay 19, 2006
yapbbSQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to...CVE-2006-24866.4 MediumMay 19, 2006
quezza bbPHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier,...CVE-2006-2485Public exploit7.5 HighMay 19, 2006
icewarp web mailCross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier...CVE-2006-24844.3 MediumMay 19, 2006
lighthouse development squirrelcartPHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier...CVE-2006-2483Public exploit6.4 MediumMay 19, 2006
linux kernelCertain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux...CVE-2006-18567.5 HighMay 19, 2006
linux kernelRace condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local...CVE-2006-00394.7 MediumMay 19, 2006
diaFormat string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of...CVE-2006-2480Public exploitFix available5.1 MediumMay 19, 2006
skypeArgument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*...CVE-2006-23122.6 LowMay 19, 2006
livedata iccp serverHeap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of...CVE-2006-00597.5 HighMay 19, 2006
bitrix site managerThe Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of...CVE-2006-24795.0 MediumMay 19, 2006
bitrix site managerBitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a...CVE-2006-24785.0 MediumMay 19, 2006
bitrix site managerCross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1...CVE-2006-24774.9 MediumMay 19, 2006
bitrix site managerBitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access...CVE-2006-24765.0 MediumMay 19, 2006
cosmoshopDirectory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8...CVE-2006-24757.8 HighMay 19, 2006
cosmoshopSQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote...CVE-2006-2474Public exploit7.5 HighMay 19, 2006
openwiki** DISPUTED ** Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote...CVE-2006-2473Public exploitDisputed4.3 MediumMay 19, 2006
bea weblogic serverUnspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6,...CVE-2006-24724.9 MediumMay 19, 2006
bea weblogic serverMultiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through...CVE-2006-24715.0 MediumMay 19, 2006
bea weblogic serverUnspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9...CVE-2006-24707.5 HighMay 19, 2006
bea weblogic serverThe HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7...CVE-2006-24697.5 HighMay 19, 2006
bea weblogic serverThe WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6...CVE-2006-24684.0 MediumMay 19, 2006
bea weblogic serverBEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP...CVE-2006-24674.0 MediumMay 19, 2006
bea weblogic serverBEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source...CVE-2006-24662.6 LowMay 19, 2006
mp3infoBuffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command...CVE-2006-2465Public exploitFix available5.1 MediumMay 19, 2006
bea weblogic serverstopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6...CVE-2006-24644.6 MediumMay 19, 2006
out of the trees web design selectapixview_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation...CVE-2006-24635.0 MediumMay 19, 2006
bea weblogic serverBEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive...CVE-2006-24625.0 MediumMay 19, 2006
bea weblogic serverBEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in...CVE-2006-24615.0 MediumMay 19, 2006
sugarcrmSugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not...CVE-2006-2460Public exploitEPSS 10.2%6.4 MediumMay 19, 2006
php fusion fusionSQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote...CVE-2006-2459Public exploit6.4 MediumMay 19, 2006
libextractorLibextractor multiple heap-based buffer overflowsCVE-2006-2458Public exploitFix available4.0 MediumMay 18, 2006
linux kernelchoose_new_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows...CVE-2006-18552.1 LowMay 18, 2006
linux kernelLinux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio...CVE-2006-15284.9 MediumMay 18, 2006
knowledgetreeThe Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions...CVE-2006-24434.6 MediumMay 18, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open