Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
October

CVEs published in October 2006

546 vulnerabilities, 65 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

lodel cmsPHP remote file inclusion vulnerability in calcul-page.php in Lodel (patchlodel) 0.7.3 allows...CVE-2006-5422Public exploit7.5 HighOctober 20, 2006
wsn forum forumWSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified...CVE-2006-5421Public exploit7.5 HighOctober 20, 2006
kerio winroute firewallKerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service ...CVE-2006-54205.0 MediumOctober 20, 2006
university of glasgow specimen image databasePHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image...CVE-2006-5419Public exploit7.5 HighOctober 20, 2006
phpbb searchindexerPHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search...CVE-2006-5418Public exploit6.8 MediumOctober 20, 2006
mcafee internet security suite, network agent, personal firewall plus +1 more +3 moreMcAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly...CVE-2006-54175.0 MediumOctober 20, 2006
f5 firepass 1000Cross-site scripting (XSS) vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5...CVE-2006-54165.1 MediumOctober 20, 2006
news defilante horizontale defilante horizontalePHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante...CVE-2006-5415Public exploit7.5 HighOctober 20, 2006
barry nauta brimBarry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other...CVE-2006-54145.0 MediumOctober 20, 2006
supermodMultiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow...CVE-2006-5413Public exploit7.5 HighOctober 20, 2006
php outburst easynewsadmin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows...CVE-2006-5412Public exploit5.1 MediumOctober 20, 2006
justin white freewpsUnrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS),...CVE-2006-5411Public exploit7.5 HighOctober 20, 2006
boonex dolphinPHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin...CVE-2006-54105.1 MediumOctober 20, 2006
mobilesecure inc highwall endpoint, highwall enterprise +1 moreMultiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall...CVE-2006-54097.5 HighOctober 20, 2006
mobilesecure inc highwall endpoint, highwall enterprise +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the wireless IDS management interface for...CVE-2006-54085.1 MediumOctober 20, 2006
enhancesoft osticketPHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to...CVE-2006-54077.5 HighOctober 19, 2006
passgo defenderPassgo Defender 5.2 creates the application directory with insecure permissions (Everyone/Full...CVE-2006-54063.6 LowOctober 19, 2006
toshiba bluetooth wireless device driverUnspecified vulnerability in Toshiba Bluetooth wireless device driver 3.x and 4 through 4.00.35,...CVE-2006-54056.2 MediumOctober 19, 2006
symantec automated support assistant, norton antivirus, norton internet security +1 more +3 moreUnspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as...CVE-2006-54042.6 LowOctober 19, 2006
symantec automated support assistant, norton antivirus, norton internet security +1 more +3 moreStack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant,...CVE-2006-54035.1 MediumOctober 19, 2006
phpmybibliMultiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote...CVE-2006-5402Public exploit7.5 HighOctober 18, 2006
aroundmePHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php in...CVE-2006-5401Public exploit7.5 HighOctober 18, 2006
cyberbrauPHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when...CVE-2006-5400Public exploit5.1 MediumOctober 18, 2006
phprecipebookPHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36,...CVE-2006-5399Public exploit7.5 HighOctober 18, 2006
simplogSQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute...CVE-2006-5398Public exploit7.5 HighOctober 18, 2006
sun solarisThe tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is...CVE-2006-53964.9 MediumOctober 18, 2006
microsoft class package export toolBuffer overflow in Microsoft Class Package Export Tool (aka clspack.exe) allows context-dependent...CVE-2006-5395Public exploit7.5 HighOctober 18, 2006
cisco secure desktopThe default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box...CVE-2006-53942.1 LowOctober 18, 2006
cisco secure desktopCisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407...CVE-2006-53932.1 LowOctober 18, 2006
opendoc fullcoreMultiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow...CVE-2006-5392Public exploitEPSS 16.5%7.5 HighOctober 18, 2006
xfireXfire 1.64 and earlier allows remote attackers to cause a denial of service (client application...CVE-2006-5391Public exploit5.0 MediumOctober 18, 2006
phpbb acp user registration modulePHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User...CVE-2006-5390Public exploit6.8 MediumOctober 18, 2006
wyana php-wyanatools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an...CVE-2006-53895.0 MediumOctober 18, 2006
webspellSQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers...CVE-2006-5388Public exploit7.5 HighOctober 18, 2006
phpbb plusxl plusxlPHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272...CVE-2006-5387Public exploit7.5 HighOctober 18, 2006
nuralstorm webmailPHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier,...CVE-2006-5386Public exploit7.5 HighOctober 18, 2006
spamoboronaPHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and...CVE-2006-5385Public exploit7.5 HighOctober 18, 2006
cds software consortium agendaPHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software...CVE-2006-5384Public exploit7.5 HighOctober 18, 2006
def-blogSQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers...CVE-2006-5383Public exploit7.5 HighOctober 18, 2006
qt, redhat kdelibs +1 moreInteger overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the...CVE-2006-4811Fix available6.8 MediumOctober 18, 2006
contenido contendioContenido CMS stores sensitive data under the web root with insufficient access control, which...CVE-2006-53815.0 MediumOctober 18, 2006
contenido contendio** DISPUTED ** Remote file inclusion vulnerability in Contenido CMS allows remote attackers to...CVE-2006-5380Disputed7.5 HighOctober 18, 2006
nvidia binary graphics driverThe accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For...CVE-2006-5379Public exploitFix availableEPSS 27.4%7.5 HighOctober 18, 2006
oracle enterpriseoneUnspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1,...CVE-2006-53789.0 HighOctober 18, 2006
oracle peoplesoft enterpriseUnspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90...CVE-2006-53779.0 HighOctober 18, 2006
oracle peoplesoft enterpriseMultiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8...CVE-2006-53769.0 HighOctober 18, 2006
oracle peoplesoft enterpriseMultiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8...CVE-2006-537510.0 HighOctober 18, 2006
oracle pharmaceuticalUnspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and...CVE-2006-537410.0 HighOctober 18, 2006
oracle e-business suiteUnspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1...CVE-2006-53739.0 HighOctober 18, 2006
oracle e-business suiteMultiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have...CVE-2006-53729.0 HighOctober 18, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open