Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
September

CVEs published in September 2006

550 vulnerabilities, 23 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

neosys neon webmailThe updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter...CVE-2006-4954Public exploit7.5 HighSeptember 23, 2006
neosys neon webmailMultiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote...CVE-2006-4953Public exploit7.5 HighSeptember 23, 2006
neosys neon webmailThe updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e...CVE-2006-4952Public exploit7.5 HighSeptember 23, 2006
neosys neon webmailNeon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by...CVE-2006-49517.5 HighSeptember 23, 2006
cisco iosCisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432...CVE-2006-495010.0 HighSeptember 23, 2006
drupal site profile directory moduleCross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages...CVE-2006-49494.3 MediumSeptember 23, 2006
prosysinfo tftp server tftpdwinStack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier...CVE-2006-4948Public exploitEPSS 55.6%7.5 HighSeptember 23, 2006
drupal search keyword moduleCross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15...CVE-2006-49476.8 MediumSeptember 23, 2006
cmsdevelopment business card web builderPHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business...CVE-2006-4946Public exploit5.1 MediumSeptember 23, 2006
cardway digitalwebshopMultiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud)...CVE-2006-4945Public exploit5.1 MediumSeptember 23, 2006
boesch it-consulting progsysPHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and...CVE-2006-4944Public exploit7.5 HighSeptember 23, 2006
moodlecourse/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before...CVE-2006-49435.0 MediumSeptember 23, 2006
moodleMoodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote...CVE-2006-49424.6 MediumSeptember 23, 2006
moodleMultiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote...CVE-2006-49414.3 MediumSeptember 23, 2006
moodlelogin/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive...CVE-2006-49405.0 MediumSeptember 23, 2006
moodlebackup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup...CVE-2006-49395.0 MediumSeptember 23, 2006
moodlehelp.php in Moodle before 1.6.2 does not check the existence of certain help files before...CVE-2006-49384.0 MediumSeptember 23, 2006
moodlelib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING...CVE-2006-49374.0 MediumSeptember 23, 2006
moodleMoodle does not properly validate module instance idCVE-2006-4936Fix available10.0 HighSeptember 23, 2006
moodleThe Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has...CVE-2006-493510.0 HighSeptember 23, 2006
broadcom etrust security command center, etrust audit client, etrust audit datatools +1 more +3 moreComputer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust...CVE-2006-4901Public exploitEPSS 11.2%6.4 MediumSeptember 22, 2006
broadcom etrust security command centerDirectory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0...CVE-2006-4900Public exploit5.5 MediumSeptember 22, 2006
broadcom etrust security command centerThe ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up...CVE-2006-4899Public exploitEPSS 10.4%5.0 MediumSeptember 22, 2006
apple mac os x, mac os x server +1 moreInteger overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow...CVE-2006-35097.2 HighSeptember 21, 2006
apple mac os x, mac os x server +1 moreHeap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows...CVE-2006-35087.2 HighSeptember 21, 2006
apple mac os x, mac os x server +1 moreMultiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and...CVE-2006-3507Public exploit7.2 HighSeptember 21, 2006
esyndicat portal system portal systemCross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote...CVE-2006-4923Public exploit4.3 MediumSeptember 21, 2006
siteatschoolUnrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site...CVE-2006-4922Public exploit5.0 MediumSeptember 21, 2006
siteatschoolPHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote...CVE-2006-4921Public exploit7.5 HighSeptember 21, 2006
siteatschoolMultiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow...CVE-2006-4920Public exploitEPSS 11.5%7.5 HighSeptember 21, 2006
siteatschoolDirectory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S...CVE-2006-49192.6 LowSeptember 21, 2006
simple discussion board discussion boardMultiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote...CVE-2006-4918Public exploit7.5 HighSeptember 21, 2006
pt news newsCross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers...CVE-2006-4917Public exploit4.3 MediumSeptember 21, 2006
asp indir tekman portalSQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers...CVE-2006-4916Public exploit7.5 HighSeptember 21, 2006
innovate portal portalCross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote...CVE-2006-4915Public exploit4.3 MediumSeptember 21, 2006
a.l-pifouDirectory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary...CVE-2006-49142.6 LowSeptember 21, 2006
alstrasoft e-friendsDirectory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows...CVE-2006-4913Public exploit7.5 HighSeptember 21, 2006
php docwriter docwriterPHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers...CVE-2006-4912Public exploit7.5 HighSeptember 21, 2006
cisco ips sensor softwareUnspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in...CVE-2006-49117.5 HighSeptember 21, 2006
cisco ids sensor software, ips sensor software +1 moreThe web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0...CVE-2006-49105.0 MediumSeptember 21, 2006
cisco guard ddos mitigation applianceCross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6),...CVE-2006-49092.6 LowSeptember 21, 2006
ohio state university osu httpdOSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL...CVE-2006-49085.0 MediumSeptember 21, 2006
ohio state university osu httpdOSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a...CVE-2006-49075.0 MediumSeptember 21, 2006
marc logemann more.groupwareSQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote...CVE-2006-4906Public exploit7.5 HighSeptember 21, 2006
artmedic webdesign linksPHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote...CVE-2006-49057.5 HighSeptember 21, 2006
qualiteam x-cartDynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier...CVE-2006-4904Public exploit7.5 HighSeptember 21, 2006
doctor web ltd dr.webHeap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier...CVE-2006-4438Public exploitEPSS 10.7%6.4 MediumSeptember 20, 2006
guanxicrm business solutionPHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier...CVE-2006-4898Public exploit7.5 HighSeptember 19, 2006
cmtextsCMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with...CVE-2006-4897Public exploit5.0 MediumSeptember 19, 2006
idevspot nixieaffiliateIDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates...CVE-2006-48957.5 HighSeptember 19, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open