Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
May

CVEs published in May 2006

582 vulnerabilities, 14 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

docebolmsMultiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to...CVE-2006-2668Public exploit7.5 HighMay 30, 2006
wordpressDirect static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers...CVE-2006-2667Public exploitFix availableEPSS 14.5%7.5 HighMay 30, 2006
v-webmailPHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through...CVE-2006-2666Public exploit7.5 HighMay 30, 2006
v-webmailPHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3...CVE-2006-2665Public exploit7.5 HighMay 30, 2006
ifdate.com ifdateCross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject...CVE-2006-26645.8 MediumMay 30, 2006
ifusionservices iflanceMultiple cross-site scripting (XSS) vulnerabilities in iFlance 1.1 allow remote attackers to...CVE-2006-26634.3 MediumMay 30, 2006
freetype, canonical ubuntu linux, debian linux +2 moreftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via...CVE-2006-2661Public exploitFix availableEPSS 16.5%5.0 MediumMay 30, 2006
double precision incorporated courier mtalibs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU...CVE-2006-2659Fix available7.8 HighMay 30, 2006
libtiffStack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might...CVE-2006-2656Public exploitFix availableEPSS 14.4%7.5 HighMay 30, 2006
d-link dsa-3100 airspot gatewayCross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote...CVE-2006-2653Public exploit2.6 LowMay 30, 2006
wikiniCross-site scripting (XSS) vulnerability in WikiNi 0.4.2 and earlier allows remote attackers to...CVE-2006-26526.8 MediumMay 30, 2006
vacation rentals rental scriptCross-site scripting (XSS) vulnerability in index.php in Vacation Rental Script 1.0 allows remote...CVE-2006-26512.6 LowMay 30, 2006
cosmicphp cosmicshoppingcartSQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote...CVE-2006-2650Public exploit7.5 HighMay 30, 2006
cosmicphp cosmicshoppingcartMultiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c)...CVE-2006-26496.8 MediumMay 30, 2006
aspbbCross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows...CVE-2006-2648Public exploit2.6 LowMay 30, 2006
ibm aixUntrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local...CVE-2006-26477.2 HighMay 30, 2006
alt-n mdaemonBuffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute...CVE-2006-2646Public exploit7.5 HighMay 30, 2006
plume-cms plume cmsPHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows...CVE-2006-2645Public exploit7.5 HighMay 30, 2006
circle r monster top listCross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote...CVE-2006-26434.3 MediumMay 30, 2006
php-residence** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. ...CVE-2006-26424.3 MediumMay 30, 2006
john frank asset manager** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. ...CVE-2006-26415.8 MediumMay 30, 2006
omegasoft interneserviceslosungenCross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft)...CVE-2006-26405.8 MediumMay 30, 2006
phpsimplechooseCross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006...CVE-2006-26394.3 MediumMay 30, 2006
qjstudios qjforumSQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary...CVE-2006-2638Public exploit6.4 MediumMay 30, 2006
tuttophp morris guestbook, pretty guestbook, smile guestbook +2 moreCross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2)...CVE-2006-26374.3 MediumMay 30, 2006
katy whitton newscmslitenewsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and...CVE-2006-2636Public exploit7.5 HighMay 30, 2006
tiki tikiwiki cms\/groupwareMultiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x...CVE-2006-2635Public exploit4.3 MediumMay 30, 2006
neocrome seditioCross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio...CVE-2006-26344.3 MediumMay 30, 2006
andrew godwin bytehoardAbsolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard...CVE-2006-26334.0 MediumMay 30, 2006
andrew godwin bytehoardCross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote...CVE-2006-26323.5 LowMay 30, 2006
phpThe cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read...CVE-2006-25632.1 LowMay 29, 2006
debian shadowuseradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide...CVE-2006-1174Fix available3.7 LowMay 28, 2006
diaMultiple unspecified format string vulnerabilities in Dia have unspecified impact and attack...CVE-2006-2453Fix available7.5 HighMay 28, 2006
phpfoxphpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie...CVE-2006-26314.0 MediumMay 27, 2006
symantec client security, norton antivirus +1 moreStack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote...CVE-2006-2630Public exploitEPSS 74.1%10.0 HighMay 27, 2006
linux kernelRace condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local...CVE-2006-2629Public exploit4.0 MediumMay 27, 2006
alstrasoft webhost directoryCross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2)...CVE-2006-26184.3 MediumMay 26, 2006
alstrasoft webhost directory(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote...CVE-2006-26175.0 MediumMay 26, 2006
alstrasoft webhost directorySQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2...CVE-2006-26167.5 HighMay 26, 2006
russcom network russcom.pingping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell...CVE-2006-26157.5 HighMay 26, 2006
sun n1 system managerSun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the...CVE-2006-26144.6 MediumMay 26, 2006
mozilla firefox, suite, netscape navigator +2 moreMozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0,...CVE-2006-26134.3 MediumMay 26, 2006
novell clientNovell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a...CVE-2006-26122.1 LowMay 26, 2006
mediawikiCross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in...CVE-2006-26114.3 MediumMay 26, 2006
spiffyjr phpraidCross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to...CVE-2006-26102.6 LowMay 26, 2006
artmedic webdesign newsletterartmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows...CVE-2006-26095.1 MediumMay 26, 2006
artmedic webdesign newsletterartmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows...CVE-2006-2608Public exploit5.1 MediumMay 26, 2006
awstatsAWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary...CVE-2006-2644Fix available4.0 MediumMay 26, 2006
paul vixie vixie crondo_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call,...CVE-2006-2607Fix available7.2 HighMay 25, 2006
chattyCross-site scripting (XSS) vulnerability in Chatty, possibly 1.0.2 and other versions, allows...CVE-2006-26064.3 MediumMay 25, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open