Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
September

CVEs published in September 2006

550 vulnerabilities, 23 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm directorDirectory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote...CVE-2006-4681Public exploit5.0 MediumSeptember 11, 2006
canon imagerunner 2620, imagerunner 5020, imagerunner 6870 +4 more +6 moreThe Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address...CVE-2006-46804.0 MediumSeptember 11, 2006
andreas gohr dokuwikiDokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers...CVE-2006-4679Fix available5.0 MediumSeptember 11, 2006
comscripts news evolutionPHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to...CVE-2006-4678Public exploit7.5 HighSeptember 11, 2006
phpopenchat** DISPUTED ** PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat...CVE-2006-4677Disputed7.5 HighSeptember 11, 2006
tibco rendezvousTIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which...CVE-2006-4676Public exploit1.2 LowSeptember 11, 2006
andreas gohr dokuwikiUnrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows...CVE-2006-4675Fix available7.5 HighSeptember 11, 2006
andreas gohr dokuwikiDirect static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows...CVE-2006-4674Fix available7.5 HighSeptember 11, 2006
linux kernelThe Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c...CVE-2006-46237.8 HighSeptember 11, 2006
php fusion fusionGlobal variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the...CVE-2006-4673Public exploit2.6 LowSeptember 11, 2006
profitcode ppalcartPHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of...CVE-2006-4672Public exploit7.5 HighSeptember 11, 2006
fscripts fantastic newsPHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly...CVE-2006-4671Public exploit6.8 MediumSeptember 11, 2006
gtasoft photokorn galleryMultiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow...CVE-2006-4670Public exploitEPSS 10.5%7.5 HighSeptember 9, 2006
someryPHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier,...CVE-2006-4669Public exploit5.1 MediumSeptember 9, 2006
rob hensley ackertodoCross-site scripting (XSS) vulnerability in index.php in Rob Hensley AckerTodo 4.0 allows remote...CVE-2006-4668Public exploit4.3 MediumSeptember 9, 2006
runcmsMultiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute...CVE-2006-46677.5 HighSeptember 9, 2006
stefan ernst newsscriptMultiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5...CVE-2006-4666Public exploit7.5 HighSeptember 9, 2006
mkportalCross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote...CVE-2006-46654.3 MediumSeptember 9, 2006
premod shadow shadowPHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1...CVE-2006-4664Public exploit5.1 MediumSeptember 9, 2006
linux kernel** DISPUTED ** The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly...CVE-2006-4663Disputed4.6 MediumSeptember 9, 2006
mirabilis icqHeap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and...CVE-2006-46627.5 HighSeptember 9, 2006
icq inc toolbarAOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of...CVE-2006-46612.6 LowSeptember 9, 2006
icq inc toolbarMultiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3...CVE-2006-46605.8 MediumSeptember 9, 2006
panda platinum internet securityThe Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for...CVE-2006-46595.0 MediumSeptember 9, 2006
panda platinum internet securityPanda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers...CVE-2006-46585.0 MediumSeptember 9, 2006
panda platinum internet securityPanda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under...CVE-2006-46577.2 HighSeptember 9, 2006
web-provence sl sitePHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence...CVE-2006-4656Public exploitEPSS 11.1%7.5 HighSeptember 9, 2006
sco unixware, sun solaris +1 moreBuffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and...CVE-2006-4655Public exploit4.6 MediumSeptember 9, 2006
efs software easy address book web serverFormat string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause...CVE-2006-4654Public exploit5.1 MediumSeptember 9, 2006
amazing little picture poll little picture poll, amazing little poll little poll +1 more(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the...CVE-2006-46535.0 MediumSeptember 9, 2006
amazing little picture poll little picture poll, amazing little poll little poll +1 more(1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of "dsapoll",...CVE-2006-46527.5 HighSeptember 9, 2006
threesquared.net php download scriptDirectory traversal vulnerability in download/index.php, and possibly download.php, in...CVE-2006-46515.0 MediumSeptember 9, 2006
cisco iosCisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes...CVE-2006-46502.6 LowSeptember 9, 2006
twikiDirectory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote...CVE-2006-4294Public exploit5.0 MediumSeptember 9, 2006
bingo news newsPHP remote file inclusion vulnerability in bp_news.php in BinGo News (BP News) 3.01 and earlier...CVE-2006-4649Public exploit7.5 HighSeptember 8, 2006
bingo news newsPHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier...CVE-2006-4648Public exploit7.5 HighSeptember 8, 2006
sponge news newsPHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote...CVE-2006-4647Public exploit7.5 HighSeptember 8, 2006
drupal pathauto moduleCross-site scripting (XSS) vulnerability in the Drupal 4.7 Pathauto module before pathauto_node...CVE-2006-46466.8 MediumSeptember 8, 2006
akarru social bookmarking enginePHP remote file inclusion vulnerability in akarru.gui/main_content.php in Akarru Social...CVE-2006-4645Public exploit7.5 HighSeptember 8, 2006
phpfullannuPHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier...CVE-2006-4644Public exploit7.5 HighSeptember 8, 2006
uni-vert phpleagueSQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows...CVE-2006-4643Public exploit7.5 HighSeptember 8, 2006
auditwizardAuditWizard 6.3.2, when using "Remote Audit," logs the administrator password in plaintext to...CVE-2006-46421.7 LowSeptember 8, 2006
muratsoft haber portalSQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers...CVE-2006-4641Public exploit7.5 HighSeptember 8, 2006
ipswitch imail plus, imail secure server, collaboration suite +2 moreStack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and...CVE-2006-4379Public exploitEPSS 60.9%7.5 HighSeptember 8, 2006
microchip data systems ziptv for delphi 7, pentaware pentasuite-pro, pentazip +1 more +3 moreHeap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C+...CVE-2006-24826.8 MediumSeptember 8, 2006
c-news.fr c-newsMultiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when...CVE-2006-46395.1 MediumSeptember 8, 2006
acgv news newsPHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows...CVE-2006-4638Public exploit5.1 MediumSeptember 8, 2006
acgv news newsMultiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to...CVE-2006-4637Public exploit5.1 MediumSeptember 8, 2006
szewo phpcommanderDirectory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers...CVE-2006-4636Public exploit7.5 HighSeptember 8, 2006
squiz mysource classicUnspecified vulnerability in MySource Classic 2.14.6, and possibly earlier, allows remote...CVE-2006-46356.5 MediumSeptember 8, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open