Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
September

CVEs published in September 2006

550 vulnerabilities, 23 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm aixUnspecified vulnerability in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to...CVE-2006-50057.2 HighSeptember 27, 2006
ibm aixUnspecified vulnerability in the rdist command in IBM AIX 5.2.0 and 5.3.0 allows local users to...CVE-2006-50042.1 LowSeptember 27, 2006
ibm aixUnspecified vulnerability in the named8 command in IBM AIX 5.2.0 and 5.3.0 allows local users to...CVE-2006-50037.2 HighSeptember 27, 2006
ibm inventory scoutUnspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 ...CVE-2006-50025.0 MediumSeptember 27, 2006
openbsd opensshsshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to...CVE-2006-4924Public exploitFix availableEPSS 38.1%7.8 HighSeptember 27, 2006
ipswitch ws ftp serverUnspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly...CVE-2006-5001EPSS 32.4%5.0 MediumSeptember 26, 2006
ipswitch ws ftp serverMultiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down...CVE-2006-5000EPSS 64.4%6.5 MediumSeptember 26, 2006
joomla joomlalibUnspecified vulnerability in JoomlaLib (com_joomlalib) before 1.2.2 for Joomla! allows remote...CVE-2006-499610.0 HighSeptember 26, 2006
joomla bsq sitestatsPHP remote file inclusion vulnerability in BSQ Sitestats (bsq_sitestats) before 2.1.1 for Joomla!...CVE-2006-49957.5 HighSeptember 26, 2006
apachefriends xamppMultiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow...CVE-2006-49944.6 MediumSeptember 26, 2006
allmyguests project allmyguestsMultiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote...CVE-2006-4993Public exploit7.5 HighSeptember 26, 2006
joomla jd-wordpressMultiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1...CVE-2006-4992Public exploit7.5 HighSeptember 26, 2006
rsa keon certificate authority managerRSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to...CVE-2006-49913.6 LowSeptember 26, 2006
photopost php proMultiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute...CVE-2006-49907.5 HighSeptember 26, 2006
patrick michaelis wili-cmsPatrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct...CVE-2006-4989Public exploit5.0 MediumSeptember 26, 2006
patrick michaelis wili-cmsMultiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote...CVE-2006-4988Public exploit4.3 MediumSeptember 26, 2006
patrick michaelis wili-cmsMultiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote...CVE-2006-4987Public exploit7.5 HighSeptember 26, 2006
grayscale bandsite cmsGrayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct...CVE-2006-49865.0 MediumSeptember 26, 2006
grayscale bandsite cmsMultiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote...CVE-2006-4985Public exploit4.3 MediumSeptember 26, 2006
grayscale bandsite cmsMultiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote...CVE-2006-49847.5 HighSeptember 26, 2006
cisco network access controlCisco NAC allows quarantined devices to communicate over the network with (1) DNS, (2) DHCP, and ...CVE-2006-49837.5 HighSeptember 26, 2006
cisco network access controlCisco NAC maintains an exception list that does not record device properties other than MAC...CVE-2006-49824.6 MediumSeptember 26, 2006
symantec sygate network access controlSymantec Sygate NAC allows physically proximate attackers to bypass control methods and join a...CVE-2006-49814.6 MediumSeptember 26, 2006
freebsdInteger signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions...CVE-2006-4178Public exploit4.9 MediumSeptember 26, 2006
freebsdInteger overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier...CVE-2006-41727.2 HighSeptember 26, 2006
walter beschmout phpquizDirect static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz...CVE-2006-4979Public exploit5.0 MediumSeptember 25, 2006
walter beschmout phpquizMultiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote...CVE-2006-4978Public exploit7.5 HighSeptember 25, 2006
walter beschmout phpquizMultiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin...CVE-2006-4977Public exploit5.0 MediumSeptember 25, 2006
john lim adodb date libraryThe Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive...CVE-2006-4976Fix available5.0 MediumSeptember 25, 2006
yahoo messengerYahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user...CVE-2006-49752.6 LowSeptember 25, 2006
ipswitch ws ftp serverBuffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute...CVE-2006-4974Public exploit7.5 HighSeptember 25, 2006
dnnsoftware dotnetnukeCross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems...CVE-2006-4973Public exploit4.3 MediumSeptember 25, 2006
mybulletinboardCross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka...CVE-2006-49725.1 MediumSeptember 25, 2006
mybulletinboardMyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct...CVE-2006-49715.0 MediumSeptember 25, 2006
wahm e-commerce pie cart proPHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows...CVE-2006-4970Public exploit7.5 HighSeptember 25, 2006
wahm e-commerce pie cart proMultiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote...CVE-2006-4969Public exploitEPSS 12.3%7.5 HighSeptember 25, 2006
postnuke software foundation pnphpbbPHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows...CVE-2006-4968Public exploit7.5 HighSeptember 25, 2006
nextage shopping cartMultiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to...CVE-2006-49676.8 MediumSeptember 25, 2006
chumpsoft phpquestionnairePHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ...CVE-2006-4966Public exploit7.5 HighSeptember 25, 2006
apple quicktimeApple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript...CVE-2006-4965Public exploitEPSS 13.4%5.0 MediumSeptember 25, 2006
maxdev md-proCross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote...CVE-2006-49646.8 MediumSeptember 23, 2006
exponent cmsDirectory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to...CVE-2006-4963Public exploit6.4 MediumSeptember 23, 2006
blue dragon php blue dragonDirectory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows...CVE-2006-4962Public exploit6.4 MediumSeptember 23, 2006
blue dragon php blue dragonSQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel...CVE-2006-4961Public exploit7.5 HighSeptember 23, 2006
blue dragon php blue dragonCross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows...CVE-2006-4960Public exploit6.8 MediumSeptember 23, 2006
sun secure global desktopSun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain...CVE-2006-49595.0 MediumSeptember 23, 2006
sun secure global desktopMultiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka...CVE-2006-49586.8 MediumSeptember 23, 2006
the myreview system myreviewSQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows...CVE-2006-4957Public exploit7.5 HighSeptember 23, 2006
neosys neon webmailCross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java...CVE-2006-4956Public exploit6.8 MediumSeptember 23, 2006
neosys neon webmailDirectory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5...CVE-2006-4955Public exploit5.0 MediumSeptember 23, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open