Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
December

CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

netbsdThe accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and...CVE-2006-66531.7 LowDecember 20, 2006
apple mac os x, netbsd +1 moreBuffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914,...CVE-2006-6652Public exploitEPSS 20.0%9.0 HighDecember 20, 2006
intel 2200bg proset wirelessRace condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers...CVE-2006-6651Public exploit6.8 MediumDecember 20, 2006
mxbb chartsPHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts) 1.0.0...CVE-2006-6650Public exploit6.8 MediumDecember 20, 2006
hypervmCross-site scripting (XSS) vulnerability in display.php in HyperVM 1.2 and earlier allows remote...CVE-2006-66496.8 MediumDecember 20, 2006
planetluc.com ratemePHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier...CVE-2006-6648Public exploit7.5 HighDecember 20, 2006
drupal mysiteCross-site scripting (XSS) vulnerability in the MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x...CVE-2006-66476.8 MediumDecember 20, 2006
drupal project, project issue tracking +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Drupal (1) Project Issue Tracking 4.7.x-1...CVE-2006-66466.8 MediumDecember 20, 2006
mxbb web linksPHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links ...CVE-2006-6645Public exploit7.5 HighDecember 20, 2006
mxbb meetingPHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting...CVE-2006-6644Public exploit6.8 MediumDecember 20, 2006
fightersoft multimedia star ftp serverFightersoft Multimedia Star FTP server 1.10 allows remote attackers to cause a denial of service ...CVE-2006-6643Public exploit5.0 MediumDecember 20, 2006
contra haber sistemi haber sistemiSQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to...CVE-2006-6642Public exploit7.5 HighDecember 20, 2006
mandiant first responseFRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured...CVE-2006-64772.4 LowDecember 20, 2006
mandiant first responseFRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the...CVE-2006-64762.4 LowDecember 20, 2006
mandiant first responseFRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL...CVE-2006-64757.1 HighDecember 20, 2006
apple mac os x, mac os x server +1 moreQuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote...CVE-2006-56812.6 LowDecember 20, 2006
linux kernelThe mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user...CVE-2006-4814Public exploit4.6 MediumDecember 20, 2006
mozilla firefoxMozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass Cross-Site Scripting (XSS)...CVE-2006-65074.3 MediumDecember 20, 2006
mozilla firefoxThe "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends the URL of the feed when...CVE-2006-65064.3 MediumDecember 20, 2006
mozilla seamonkey, thunderbird +1 moreMultiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1...CVE-2006-65056.8 MediumDecember 20, 2006
mozilla firefox, seamonkey, canonical ubuntu linux +2 moreMozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows...CVE-2006-6504Fix available9.3 HighDecember 20, 2006
mozilla firefox, seamonkey, thunderbird +2 more +4 moreMozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and...CVE-2006-6503Fix available6.8 MediumDecember 20, 2006
mozilla firefox, seamonkey, thunderbird +2 moreUse-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0...CVE-2006-6502Fix available7.1 HighDecember 20, 2006
mozilla firefox, seamonkey, thunderbird +2 more +4 moreUnspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9,...CVE-2006-6501Fix available6.8 MediumDecember 20, 2006
mozilla firefox, seamonkey, thunderbird +2 more +4 moreHeap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9,...CVE-2006-65006.8 MediumDecember 20, 2006
mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird...CVE-2006-6499Fix available4.3 MediumDecember 20, 2006
mozilla firefox, mozilla, mozilla seamonkey +1 more +3 moreMultiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0...CVE-2006-6498Fix available6.8 MediumDecember 20, 2006
mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1,...CVE-2006-6497Fix available6.8 MediumDecember 20, 2006
arcserve brightstor, broadcom cleverpath portal, cleverpath aion bpm +8 more +10 moreUnspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830,...CVE-2006-66417.5 HighDecember 20, 2006
omniture sitecatalystMultiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote...CVE-2006-6640Public exploit6.8 MediumDecember 19, 2006
chetcpasswdMultiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges...CVE-2006-66394.6 MediumDecember 19, 2006
ibm db2 universal databaseIBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted...CVE-2006-66385.0 MediumDecember 19, 2006
ibm websphere application serverThe Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17,...CVE-2006-66375.0 MediumDecember 19, 2006
ibm websphere application serverUnspecified vulnerability in the Utility Classes for IBM WebSphere Application Server (WAS)...CVE-2006-663610.0 HighDecember 19, 2006
mailenable enterprise, professional, standard +2 moreStack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier;...CVE-2006-660510.0 HighDecember 19, 2006
linux kernelMultiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net...CVE-2006-61067.5 HighDecember 19, 2006
neoscale systems cryptostor tape 700The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX...CVE-2006-38964.9 MediumDecember 19, 2006
jumbacmsPHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote...CVE-2006-6635Public exploit7.5 HighDecember 18, 2006
mambo extcalthai moduleMultiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and...CVE-2006-6634Public exploit7.5 HighDecember 18, 2006
yapbbPHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and...CVE-2006-6633Public exploit7.5 HighDecember 18, 2006
genepiPHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote...CVE-2006-6632Public exploit6.8 MediumDecember 18, 2006
ibiblio ospreyPHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier...CVE-2006-6631Public exploit6.8 MediumDecember 18, 2006
ibiblio ospreyPHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0 allows remote attackers...CVE-2006-66307.5 HighDecember 18, 2006
webwork program generation languagelib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an...CVE-2006-66297.5 HighDecember 18, 2006
openofficeInteger overflow in OpenOffice.org (OOo) 2.1 allows user-assisted remote attackers to cause a...CVE-2006-6628Public exploit4.3 MediumDecember 18, 2006
softwin bitdefender, bitdefender antivirus, bitdefender internet security +2 more +4 moreInteger overflow in the packed PE file parsing implementation in BitDefender products before...CVE-2006-662710.0 HighDecember 18, 2006
moodleCross-site scripting (XSS) vulnerability in an unspecified component of Moodle 1.5 allows remote...CVE-2006-66266.8 MediumDecember 18, 2006
moodleCross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote...CVE-2006-6625Public exploit6.8 MediumDecember 18, 2006
sambar serverThe FTP Server in Sambar Server 6.4 allows remote authenticated users to cause a denial of...CVE-2006-6624Public exploit4.0 MediumDecember 18, 2006
comodo personal firewall, symantec sygate personal firewall, avg antivirus plus firewall +2 more +4 moreSygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a...CVE-2006-66237.2 HighDecember 18, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open