Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
September

CVEs published in September 2006

550 vulnerabilities, 23 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

idevspot phplinkexchangePHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0...CVE-2006-4741Public exploit7.5 HighSeptember 13, 2006
jetbox cmsJetbox CMS allows remote attackers to obtain sensitive information via a direct request for...CVE-2006-47405.0 MediumSeptember 13, 2006
jetbox cmsMultiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to...CVE-2006-47392.6 LowSeptember 13, 2006
jetbox cmsPHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to...CVE-2006-47387.5 HighSeptember 13, 2006
jetbox cmsSQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject...CVE-2006-47377.5 HighSeptember 13, 2006
cms.r.Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to...CVE-2006-47367.5 HighSeptember 13, 2006
kellan elliott-mccrea magpierssKellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a...CVE-2006-47355.0 MediumSeptember 13, 2006
tiki tikiwiki cms\/groupwareMultiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow...CVE-2006-47347.5 HighSeptember 13, 2006
sipsPHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple,...CVE-2006-4733Public exploit7.5 HighSeptember 13, 2006
microsoft visual basicUnspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact ("overflow") via...CVE-2006-473210.0 HighSeptember 13, 2006
x.org, xfree86 project x +1 moreInteger overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local...CVE-2006-3740Fix available7.2 HighSeptember 13, 2006
x.org, xfree86 project x +1 moreInteger overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to...CVE-2006-3739Fix available7.2 HighSeptember 13, 2006
dws systems inc. sql-ledger, ledgersmb +1 moreMultiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger...CVE-2006-4731Public exploitFix available5.0 MediumSeptember 13, 2006
zopeZope allows remote attackers to read arbitrary filesCVE-2006-4684Fix available5.0 MediumSeptember 13, 2006
adobe flash playerUnspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote...CVE-2006-4640EPSS 10.7%6.8 MediumSeptember 12, 2006
apple quicktimeApple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via...CVE-2006-43895.1 MediumSeptember 12, 2006
apple quicktimeInteger overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute...CVE-2006-43885.1 MediumSeptember 12, 2006
apple quicktimeInteger overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute...CVE-2006-43865.1 MediumSeptember 12, 2006
apple quicktimeBuffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute...CVE-2006-43855.1 MediumSeptember 12, 2006
apple quicktimeHeap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers...CVE-2006-4384Public exploitEPSS 16.4%5.1 MediumSeptember 12, 2006
apple quicktimeMultiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to...CVE-2006-43825.1 MediumSeptember 12, 2006
apple quicktimeInteger overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute...CVE-2006-43815.1 MediumSeptember 12, 2006
microsoft windows 2000, ie, windows 2003 server +1 more +3 moreHeap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and...CVE-2006-3873EPSS 29.4%7.5 HighSeptember 12, 2006
microsoft windows xpUnspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and...CVE-2006-3442EPSS 27.1%7.6 HighSeptember 12, 2006
adobe flash player, flex sdk +1 moreBuffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004,...CVE-2006-3311EPSS 17.9%5.1 MediumSeptember 12, 2006
microsoft windows 2000, windows 2003 server, windows xp +2 moreCross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP,...CVE-2006-0032Public exploitEPSS 24.6%4.3 MediumSeptember 12, 2006
microsoft publisher, office +1 moreStack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote...CVE-2006-0001EPSS 42.0%9.3 HighSeptember 12, 2006
raidenhttpdPHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1...CVE-2006-4723Public exploit5.1 MediumSeptember 12, 2006
openbbPHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows...CVE-2006-4722Public exploit7.5 HighSeptember 12, 2006
ccleague pro sports cmsDirectory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote...CVE-2006-4721Public exploit5.1 MediumSeptember 12, 2006
mcgallery proPHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote...CVE-2006-4720Public exploit7.5 HighSeptember 12, 2006
myabracadawebMultiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals...CVE-2006-4719Public exploit5.1 MediumSeptember 12, 2006
korviblogMultiple cross-site scripting (XSS) vulnerabilities in livre_or.php in KorviBlog 1.3.0 allow...CVE-2006-47186.8 MediumSeptember 12, 2006
drupal pubcookie moduleThe login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and...CVE-2006-47177.5 HighSeptember 12, 2006
fire soft board soft boardPHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier...CVE-2006-4716Public exploit7.5 HighSeptember 12, 2006
spoonlabs vivvo article management cmsSQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka...CVE-2006-4715Public exploit7.5 HighSeptember 12, 2006
spoonlabs vivvo article management cmsPHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS ...CVE-2006-4714Public exploit5.1 MediumSeptember 12, 2006
psywerks pumaPHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote...CVE-2006-4713Public exploit7.5 HighSeptember 12, 2006
sageMultiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to...CVE-2006-47126.8 MediumSeptember 12, 2006
sageMultiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject...CVE-2006-47114.3 MediumSeptember 12, 2006
newsgator feeddemonMultiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow...CVE-2006-47104.3 MediumSeptember 12, 2006
vikingboardSQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute...CVE-2006-4709Public exploit5.0 MediumSeptember 12, 2006
vikingboardMultiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to...CVE-2006-4708Public exploit6.8 MediumSeptember 12, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in...CVE-2006-47076.8 MediumSeptember 12, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard)...CVE-2006-47066.8 MediumSeptember 12, 2006
dominic gamble timesheet.phpSQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet...CVE-2006-47055.0 MediumSeptember 12, 2006
phpPHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server...CVE-2006-4625Public exploit3.6 LowSeptember 12, 2006
mono xsp, suse linux, open enterprise server +2 moreDirectory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used...CVE-2006-2658Fix available5.0 MediumSeptember 12, 2006
ibm directorIBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP...CVE-2006-46835.0 MediumSeptember 11, 2006
ibm directorMultiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause...CVE-2006-46825.0 MediumSeptember 11, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open