Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
December

CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

xerox workcentreXerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...CVE-2006-64695.8 MediumDecember 11, 2006
xerox workcentreXerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...CVE-2006-64685.8 MediumDecember 11, 2006
xerox workcentreXerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...CVE-2006-64675.8 MediumDecember 11, 2006
wikyblogMultiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier...CVE-2006-64666.8 MediumDecember 11, 2006
wikyblog** DISPUTED ** Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier...CVE-2006-6465Disputed6.5 MediumDecember 11, 2006
midicart software php shopping cartviewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote...CVE-2006-64645.0 MediumDecember 11, 2006
midicart software php shopping cartUnrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated...CVE-2006-64636.5 MediumDecember 11, 2006
cm68 news newsPHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows...CVE-2006-6462Public exploit7.5 HighDecember 11, 2006
yourfreeworld stylish text ads scripttr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the...CVE-2006-64617.8 HighDecember 11, 2006
short url url, url tracker script tracker script +1 moreYourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive...CVE-2006-646010.0 HighDecember 11, 2006
phpbb toplistCross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote...CVE-2006-64596.8 MediumDecember 11, 2006
trend micro pc cillin - internet security 2006, officescan, serverprotect +2 moreThe Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used...CVE-2006-64587.8 HighDecember 11, 2006
tiki tikiwiki cms\/groupwaretiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers...CVE-2006-64575.0 MediumDecember 11, 2006
microsoft word, word viewer, office +1 more +3 moreUnspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows...CVE-2006-6456EPSS 33.9%9.3 HighDecember 11, 2006
duware dudirectoryMultiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and...CVE-2006-64557.5 HighDecember 10, 2006
j-owamp web interfaceexecInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute...CVE-2006-645410.0 HighDecember 10, 2006
j-owamp web interfacePHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1...CVE-2006-6453Public exploit6.5 MediumDecember 10, 2006
myarticlesMultiple cross-site scripting (XSS) vulnerabilities in the MyArticles module before 0.6 beta 1,...CVE-2006-64526.8 MediumDecember 10, 2006
swsoft pleskMultiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow...CVE-2006-6451Public exploit6.8 MediumDecember 10, 2006
novell zenworks patch management serverMultiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch...CVE-2006-6450EPSS 22.2%7.5 HighDecember 10, 2006
vt-forum liteVt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient...CVE-2006-64496.4 MediumDecember 10, 2006
vt-forumMultiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to...CVE-2006-64487.5 HighDecember 10, 2006
vt-forum liteMultiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote...CVE-2006-6447Public exploit6.8 MediumDecember 10, 2006
iware professionalSQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is...CVE-2006-6446Public exploit6.8 MediumDecember 10, 2006
envolutionDirectory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote...CVE-2006-6445Public exploit7.5 HighDecember 10, 2006
divx playerStack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows...CVE-2006-64446.8 MediumDecember 10, 2006
novell clientBuffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows...CVE-2006-644310.0 HighDecember 10, 2006
phpPHP 5.2.0 and 4.4 allows local users to bypass safe_mode and open_basedir restrictions via a...CVE-2006-6383Public exploit4.6 MediumDecember 10, 2006
broadcom server protection suite, brightstor arcserve backup, brightstor enterprise backup +2 moreBuffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including...CVE-2006-6379Public exploitEPSS 21.1%7.5 HighDecember 10, 2006
aol client softwareStack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl...CVE-2006-64429.3 HighDecember 10, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreXerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...CVE-2006-64414.6 MediumDecember 10, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreMultiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000,...CVE-2006-64407.5 HighDecember 10, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreXerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...CVE-2006-64397.8 HighDecember 10, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreXerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x...CVE-2006-64384.9 MediumDecember 10, 2006
xerox workcentreops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000,...CVE-2006-64377.8 HighDecember 10, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreCross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and...CVE-2006-64366.8 MediumDecember 10, 2006
xerox workcentreThe SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before...CVE-2006-64357.5 HighDecember 10, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreUnspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before...CVE-2006-64347.5 HighDecember 10, 2006
xerox workcentreXerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x...CVE-2006-64335.0 MediumDecember 10, 2006
xerox workcentreUnspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro...CVE-2006-64325.0 MediumDecember 10, 2006
xerox workcentreUnspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x...CVE-2006-64315.0 MediumDecember 10, 2006
xerox workcentre 232, workcentre 238, workcentre 245 +3 more +5 moreWeb services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17...CVE-2006-64307.8 HighDecember 10, 2006
xerox workcentreXerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x...CVE-2006-64295.0 MediumDecember 10, 2006
xerox workcentreXerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x...CVE-2006-64287.5 HighDecember 10, 2006
xerox workcentreThe Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before...CVE-2006-64277.5 HighDecember 10, 2006
thinkeditPHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and...CVE-2006-6426Public exploit6.8 MediumDecember 10, 2006
agileco agilebill, agilevoice +1 moreAgileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which...CVE-2006-64225.0 MediumDecember 10, 2006
phpbb group phpbbCross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php)...CVE-2006-6421Public exploitEPSS 16.1%6.0 MediumDecember 10, 2006
ryan demmer joomla content editorMultiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan...CVE-2006-64206.8 MediumDecember 10, 2006
ryan demmer joomla content editorjce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and...CVE-2006-64197.5 HighDecember 10, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open