Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
December

CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

denyhostsDenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add...CVE-2006-63015.0 MediumDecember 6, 2006
adobe download managerStack-based buffer overflow in the Adobe Download Manager before 2.2 allows remote attackers to...CVE-2006-5856EPSS 15.6%6.8 MediumDecember 6, 2006
ibm tivoli storage managerMultiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4...CVE-2006-5855EPSS 28.2%10.0 HighDecember 6, 2006
novell clientsrvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an...CVE-2006-63075.0 MediumDecember 5, 2006
novell clientFormat string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client...CVE-2006-63061.2 LowDecember 5, 2006
cutephp cutenewsCross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject...CVE-2006-6300Public exploit4.3 MediumDecember 5, 2006
novell zenworks asset managementInteger overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the...CVE-2006-6299EPSS 10.0%10.0 HighDecember 5, 2006
maxiasp yonetimiSQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows...CVE-2006-6298Public exploit7.5 HighDecember 5, 2006
kde kdegraphicsStack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used...CVE-2006-62975.0 MediumDecember 5, 2006
microsoft windows 2000, windows xp +1 moreThe RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows...CVE-2006-6296Public exploitEPSS 22.0%6.1 MediumDecember 5, 2006
mxbb mx tiniesPHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module...CVE-2006-6295Public exploit6.8 MediumDecember 5, 2006
frisk software f-prot antivirusMultiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have...CVE-2006-62947.5 HighDecember 5, 2006
f-prot antivirusHeap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted...CVE-2006-6293Public exploitEPSS 17.3%7.5 HighDecember 5, 2006
apple mac os xApple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 on Mac mini, MacBook, and MacBook Pro...CVE-2006-62925.7 MediumDecember 5, 2006
mailenableStack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2...CVE-2006-62916.8 MediumDecember 5, 2006
mailenable enterprise, professional +1 moreMultiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional...CVE-2006-62906.5 MediumDecember 5, 2006
woltlab burning board liteWoltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data...CVE-2006-6289Public exploit6.8 MediumDecember 5, 2006
squirrelmailMultiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow...CVE-2006-6142Fix available6.8 MediumDecember 5, 2006
niek albers coolplayerMultiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to...CVE-2006-6288Public exploit4.6 MediumDecember 4, 2006
atomix productions atomixmp3Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute...CVE-2006-6287Public exploitEPSS 10.4%7.5 HighDecember 4, 2006
palm desktopPalm Desktop 4.1.4 and earlier stores user data with weak permissions under the application...CVE-2006-62861.7 LowDecember 4, 2006
kai blankenhorn bitfolge simple and nice index file** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge...CVE-2006-6285Disputed7.5 HighDecember 4, 2006
vikingboardDirectory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated...CVE-2006-6284Public exploit9.0 HighDecember 4, 2006
vikingboardMultiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers...CVE-2006-62834.3 MediumDecember 4, 2006
vikingboardmembers.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an...CVE-2006-62829.3 HighDecember 4, 2006
dicshunaryPHP remote file inclusion vulnerability in check_status.php in dicshunary 0.1 alpha allows remote...CVE-2006-6281Public exploit7.5 HighDecember 4, 2006
o2php.com oxygenSQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier...CVE-2006-6280Public exploit7.5 HighDecember 4, 2006
alexphpteam alex guestbookindex.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a...CVE-2006-62795.0 MediumDecember 4, 2006
alexphpteam alex guestbookCross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote...CVE-2006-62786.8 MediumDecember 4, 2006
contentservDirectory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote...CVE-2006-6277Public exploit5.0 MediumDecember 4, 2006
sun java system application server, java system web server, java system web proxy server +1 more +3 moreHTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used...CVE-2006-62766.8 MediumDecember 4, 2006
sun solaris, sunos +1 moreRace condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of...CVE-2006-62754.7 MediumDecember 4, 2006
expinion.net news manager, inews publisher +1 moreSQL injection vulnerability in articles.asp in Expinion.net iNews (1) Publisher (iNP) 2.5 and...CVE-2006-62746.8 MediumDecember 4, 2006
paul griffin simple php gallerysp_index.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information...CVE-2006-62737.5 HighDecember 4, 2006
paul griffin simple php galleryCross-site scripting (XSS) vulnerability in sp_index.php in Simple PHP Gallery 1.1 allows remote...CVE-2006-6272Public exploit6.8 MediumDecember 4, 2006
phpollMultiple cross-site scripting (XSS) vulnerabilities in PHPOLL 0.96 allow remote attackers to...CVE-2006-62716.8 MediumDecember 4, 2006
kervancilar aspmforumMultiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary...CVE-2006-627010.0 HighDecember 4, 2006
infinity technologies infinitytechs restaurants cmMultiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to...CVE-2006-62697.5 HighDecember 4, 2006
neocrome land down underSQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under ...CVE-2006-626810.0 HighDecember 4, 2006
postnuke software foundation postnukePostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive...CVE-2006-62677.8 HighDecember 4, 2006
microsoft teredoTeredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity...CVE-2006-6266EPSS 12.1%6.8 MediumDecember 4, 2006
microsoft teredoTeredo clients, when located behind a restricted NAT, allow remote attackers to establish an...CVE-2006-62655.8 MediumDecember 4, 2006
microsoft teredoTeredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the...CVE-2006-6264EPSS 14.7%7.5 HighDecember 4, 2006
microsoft teredoTeredo clients, when source routing is enabled, recognize a Routing header in an encapsulated...CVE-2006-6263EPSS 12.8%6.8 MediumDecember 4, 2006
phpjunkyard mboardDirectory traversal vulnerability in mboard.php in PHPJunkYard (aka Klemen Stirn) MBoard 1.22 and...CVE-2006-62626.4 MediumDecember 4, 2006
quinnware quintessential playerBuffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a...CVE-2006-6261Public exploit9.3 HighDecember 4, 2006
redbinaria siap cmsSQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de...CVE-2006-62607.5 HighDecember 4, 2006
alterncMultiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php...CVE-2006-625910.0 HighDecember 4, 2006
alterncThe phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in...CVE-2006-62589.3 HighDecember 4, 2006
alterncThe file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote...CVE-2006-62576.8 MediumDecember 4, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open