Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
October

CVEs published in October 2006

546 vulnerabilities, 65 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

webgeneius goop galleryDirectory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote...CVE-2006-51885.0 MediumOctober 6, 2006
bulletin board ace board acePHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3...CVE-2006-5187Public exploit7.5 HighOctober 6, 2006
phpmyprofilerPHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when...CVE-2006-5186Public exploit5.1 MediumOctober 6, 2006
hamweatherEval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote...CVE-2006-51857.5 HighOctober 6, 2006
pkr internet taskjitsuSQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to...CVE-2006-51847.5 HighOctober 6, 2006
dayfox designs blogMultiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote...CVE-2006-51837.5 HighOctober 6, 2006
dan jensen travelsized cmsPHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and...CVE-2006-5182Public exploit7.5 HighOctober 6, 2006
joshua muheim phpmywebminMultiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote...CVE-2006-5181Public exploit7.5 HighOctober 6, 2006
baumedia newswriterPHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp...CVE-2006-5180Public exploit7.5 HighOctober 6, 2006
intoto igateway ssl-vpn, igateway vpn +1 moreIntoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of...CVE-2006-51795.4 MediumOctober 6, 2006
phpRace condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the...CVE-2006-5178Public exploit6.2 MediumOctober 6, 2006
mailenable enterprise, professional +1 moreThe NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers...CVE-2006-5177Public exploit9.3 HighOctober 6, 2006
mailenable enterprise, professional +1 moreBuffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows...CVE-2006-51769.3 HighOctober 6, 2006
buffalo-technology terastation hd-htgl firmwareCross-site request forgery (CSRF) vulnerability in the administrative interface for the...CVE-2006-51757.6 HighOctober 6, 2006
monoThe System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure...CVE-2006-5072Fix available6.2 MediumOctober 5, 2006
linux kernelThe copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when...CVE-2006-51742.1 LowOctober 5, 2006
symantec naveng driver, navex15 driver +1 moreThe (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later,...CVE-2006-4927Public exploit4.6 MediumOctober 5, 2006
debian linux, fedoraproject fedora core, redhat enterprise linux +5 more +7 morepam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other...CVE-2006-5170Fix available7.5 HighOctober 4, 2006
powerportalCross-site scripting (XSS) vulnerability in John Himmelman (aka DaRk2k1) PowerPortal 1.1 allows...CVE-2006-51695.1 MediumOctober 4, 2006
simon brown pebbleCross-site scripting (XSS) vulnerability in the search functionality in Simon Brown Pebble 2.0.0...CVE-2006-51684.3 MediumOctober 4, 2006
novell groupwise messengerMessenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause...CVE-2006-45115.0 MediumOctober 4, 2006
basilix webmailMultiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote...CVE-2006-5167Public exploit5.1 MediumOctober 4, 2006
php web scripts easy banner freePHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free...CVE-2006-5166Public exploit7.5 HighOctober 4, 2006
skrypty ppa galleryPHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and...CVE-2006-5165Public exploit5.1 MediumOctober 4, 2006
sum effect software digishopMultiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4...CVE-2006-5164Public exploit6.8 MediumOctober 4, 2006
ibm informix dynamic serverIBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp...CVE-2006-51633.6 LowOctober 3, 2006
microsoft internet explorerwininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a...CVE-2006-5162Public exploitEPSS 36.5%5.0 MediumOctober 3, 2006
ibm client security password managerIBM Client Security Password Manager stores and distributes saved passwords based upon the title...CVE-2006-51616.4 MediumOctober 3, 2006
mozilla firefox** DISPUTED ** Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors...CVE-2006-5160Disputed7.8 HighOctober 3, 2006
mozilla firefox** DISPUTED ** Stack-based buffer overflow in Mozilla Firefox allows remote attackers to execute...CVE-2006-5159Disputed7.5 HighOctober 3, 2006
linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe nlmclnt_mark_reclaim in clntlock.c in NFS lockd in Linux kernel before 2.6.16 allows remote...CVE-2006-51587.5 HighOctober 3, 2006
trend micro officescanFormat string vulnerability in the ActiveX control (ATXCONSOLE.OCX) in TrendMicro OfficeScan...CVE-2006-51575.1 MediumOctober 3, 2006
mcafee epolicy orchestrator, protectionpilot +1 moreBuffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1...CVE-2006-5156Public exploitEPSS 74.4%10.0 HighOctober 3, 2006
videodbPHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows...CVE-2006-5155Public exploit7.5 HighOctober 3, 2006
deluxebbPHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote...CVE-2006-5154Public exploit7.5 HighOctober 3, 2006
kerio personal firewallThe (1) fwdrv.sys and (2) khips.sys drivers in Sunbelt Kerio Personal Firewall 4.3.268 and...CVE-2006-51535.0 MediumOctober 3, 2006
microsoft internet explorerCross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers...CVE-2006-5152EPSS 10.9%6.8 MediumOctober 3, 2006
hp hp-uxUnspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and...CVE-2006-515110.0 HighOctober 3, 2006
openbiblioSQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote...CVE-2006-51506.5 MediumOctober 2, 2006
openbiblioMultiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to...CVE-2006-51497.5 HighOctober 2, 2006
forum82Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote...CVE-2006-5148Public exploit7.5 HighOctober 2, 2006
vamp webmail webmailPHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1...CVE-2006-5147Public exploit7.5 HighOctober 2, 2006
yblogMultiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject...CVE-2006-5146Public exploit6.8 MediumOctober 2, 2006
olate olatedownloadMultiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute...CVE-2006-5145Public exploit7.5 HighOctober 2, 2006
olate olatedownloadCross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote...CVE-2006-51446.8 MediumOctober 2, 2006
apple mac os xUser interface inconsistency in Workgroup Manager in Apple Mac OS X 10.4 through 10.4.7 appears...CVE-2006-43992.1 LowOctober 2, 2006
apple mac os xUnspecified vulnerability in QuickDraw Manager in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7...CVE-2006-43955.1 MediumOctober 2, 2006
apple mac os xUnchecked error condition in LoginWindow in Apple Mac OS X 10.4 through 10.4.7 prevents Kerberos...CVE-2006-43974.6 MediumOctober 2, 2006
apple mac os xA logic error in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, allows network accounts...CVE-2006-43947.5 HighOctober 2, 2006
apple mac os xUnspecified vulnerability in LoginWindow in Apple Mac OS X 10.4 through 10.4.7, when Fast User...CVE-2006-43933.7 LowOctober 2, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open