Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
December

CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

james barnsley jab guest bookMultiple cross-site scripting (XSS) vulnerabilities in pbguestbook.php in JAB Guest Book 20061205...CVE-2006-63726.8 MediumDecember 7, 2006
james barnsley jab guest bookCross-site scripting (XSS) vulnerability in pbguestbook.php in JAB Guest Book allows remote...CVE-2006-63716.8 MediumDecember 7, 2006
invision power services gallerySQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows...CVE-2006-63707.5 HighDecember 7, 2006
invision power services community blogSQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4...CVE-2006-6369Public exploit7.5 HighDecember 7, 2006
awratePHP remote file inclusion vulnerability in login.php.inc in awrate 1.0 allows remote attackers to...CVE-2006-6368Public exploit7.5 HighDecember 7, 2006
duware dudownload, dunews, dupaypal +2 moreMultiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly...CVE-2006-6367Public exploit7.5 HighDecember 7, 2006
cerberus helpdeskCross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus...CVE-2006-6366Public exploit6.8 MediumDecember 7, 2006
duware dupaypalSQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows...CVE-2006-6365Public exploit7.5 HighDecember 7, 2006
inside systems systemsCross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and...CVE-2006-6364Public exploit6.8 MediumDecember 7, 2006
bluesocket bsc 2100Cross-site scripting (XSS) vulnerability in admin.pl in BlueSocket Secure Controller (BSC) before...CVE-2006-6363Public exploit6.8 MediumDecember 7, 2006
bitflux upload progress meterHeap-based buffer overflow in the uploadprogress_php_rfc1867_file function in uploadprogress.c in...CVE-2006-636110.0 HighDecember 7, 2006
sergey korostel php upload centerPHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote...CVE-2006-6360Public exploit7.5 HighDecember 7, 2006
stefan frech online-bookmarksCross-site scripting (XSS) vulnerability in Stefan Frech online-bookmarks 0.6.12 allows remote...CVE-2006-63596.8 MediumDecember 7, 2006
stefan frech online-bookmarksSQL injection vulnerability in the login function in auth.inc in Stefan Frech online-bookmarks 0...CVE-2006-63587.5 HighDecember 7, 2006
gnu privacy guard, gpg4win, redhat enterprise linux +4 more +6 moreA "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0...CVE-2006-6235Fix available10.0 HighDecember 7, 2006
phpnewsCross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier...CVE-2006-63576.8 MediumDecember 7, 2006
phpnewsMultiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0...CVE-2006-6356Public exploit6.8 MediumDecember 7, 2006
duware duclassmateSQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to...CVE-2006-6355Public exploit10.0 HighDecember 7, 2006
duware dunews, duamazon, duarticle +8 more +10 moreMultiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to...CVE-2006-63547.5 HighDecember 7, 2006
apple bomarchivehelper, mac os x, mac os x server +2 moreMultiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote...CVE-2006-63535.0 MediumDecember 7, 2006
frisk software f-prot antivirusFRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a...CVE-2006-6352Public exploitEPSS 10.0%5.0 MediumDecember 7, 2006
khaledmuratlistKhaledMuratList stores sensitive data under the web root with insufficient access control, which...CVE-2006-635110.0 HighDecember 7, 2006
iisworks listpicslistpics 5 stores sensitive data under the web root with insufficient access control, which...CVE-2006-635010.0 HighDecember 7, 2006
pwp technologies the classified ad systemMultiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote...CVE-2006-6349Public exploit7.5 HighDecember 7, 2006
mowdbbCross-site scripting (XSS) vulnerability in board.php in mowdBB RC-6 allows remote attackers to...CVE-2006-63486.8 MediumDecember 7, 2006
tft gallery galleryUnrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators...CVE-2006-63476.5 MediumDecember 7, 2006
sap internet graphics serverUnspecified vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 15 and earlier,...CVE-2006-634610.0 HighDecember 7, 2006
sap internet graphics serverDirectory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and...CVE-2006-63457.5 HighDecember 7, 2006
neocrome seditioMultiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and...CVE-2006-63447.5 HighDecember 7, 2006
neocrome seditioSQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote...CVE-2006-6343Public exploit6.8 MediumDecember 7, 2006
klf-design klf-realtyMultiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L. Fraser) KLF-REALTY allow remote...CVE-2006-6342Public exploit7.5 HighDecember 7, 2006
mg.blattl mg.applanixMultiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote...CVE-2006-6341Public exploit7.5 HighDecember 7, 2006
nvidia nviewkeystone.exe in nVIDIA nView allows attackers to cause a denial of service via a long command...CVE-2006-6340Public exploit5.0 MediumDecember 7, 2006
devilz clanportal clanportalSQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows...CVE-2006-6339Public exploit6.8 MediumDecember 7, 2006
devilz clanportal clanportalUnrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1...CVE-2006-6338Public exploit5.0 MediumDecember 7, 2006
aspindir aspee ziyaretci defteriMultiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri...CVE-2006-6337Public exploit7.5 HighDecember 7, 2006
linux kernelThe tr_rx function in ibmtr.c for Linux kernel 2.6.19 assigns the wrong flag to the ip_summed...CVE-2006-63337.8 HighDecember 6, 2006
net-snmpUnspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity...CVE-2006-63057.5 HighDecember 6, 2006
lifetypeLifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1)...CVE-2006-61125.0 MediumDecember 6, 2006
torrentfluxmetaInfo.php in TorrentFlux 2.2, when $cfg["enable_file_priority"] is false, allows remote...CVE-2006-63316.0 MediumDecember 6, 2006
torrentfluxindex.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via...CVE-2006-6330Public exploit6.0 MediumDecember 6, 2006
torrentfluxindex.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target...CVE-2006-6329Public exploit4.9 MediumDecember 6, 2006
torrentfluxDirectory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to...CVE-2006-6328Public exploit4.9 MediumDecember 6, 2006
microsoft internet explorerMicrosoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service...CVE-2006-6311Public exploitEPSS 26.6%5.0 MediumDecember 6, 2006
microsoft internet explorerMicrosoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of...CVE-2006-6310Public exploitEPSS 16.2%5.0 MediumDecember 6, 2006
ibm tivoli storage managerMultiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3...CVE-2006-63097.5 HighDecember 6, 2006
symantec livestate agent for windows** DISPUTED ** Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by...CVE-2006-6308Disputed4.3 MediumDecember 6, 2006
microsoft office, word, word viewer +1 more +3 moreUnspecified vulnerability in Microsoft Word 2000 and 2002, Office Word and Word Viewer 2003, Word...CVE-2006-5994EPSS 33.7%9.3 HighDecember 6, 2006
yukihiro matsumoto rubyThe read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries...CVE-2006-63035.0 MediumDecember 6, 2006
fail2banfail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers...CVE-2006-63025.0 MediumDecember 6, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open