Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
December

CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

dxmsoft xm easy personal ftp serverFormat string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause...CVE-2006-6751Public exploit5.0 MediumDecember 27, 2006
dxmsoft xm easy personal ftp serverFormat string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause...CVE-2006-6750Public exploit5.0 MediumDecember 27, 2006
openserBuffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows...CVE-2006-67499.3 HighDecember 27, 2006
newxooperPHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows...CVE-2006-67487.5 HighDecember 27, 2006
dreaxteam xt-newsSQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute...CVE-2006-6747Public exploit7.5 HighDecember 27, 2006
dreaxteam xt-newsMultiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to...CVE-2006-6746Public exploit4.3 MediumDecember 27, 2006
stefan ritt elog web logbookThe show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated...CVE-2006-63185.0 MediumDecember 27, 2006
sun jre, j2se +1 moreMultiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime...CVE-2006-67459.3 HighDecember 26, 2006
phpprofilesphpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2...CVE-2006-67442.1 LowDecember 26, 2006
phpprofilesphpProfiles before 2.1.1 uses world writable permissions for certain profile files and...CVE-2006-67434.6 MediumDecember 26, 2006
hp ftp print server, laserjet 5000, laserjet 5100 +2 moreMultiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers...CVE-2006-67427.8 HighDecember 26, 2006
mkportalCross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to...CVE-2006-6741Public exploit5.8 MediumDecember 26, 2006
phpprofilesMultiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote...CVE-2006-6740Public exploit7.5 HighDecember 26, 2006
paristemiPHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers...CVE-2006-6739Public exploit7.5 HighDecember 26, 2006
cwm-design cwmcounterPHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows...CVE-2006-6738Public exploit6.8 MediumDecember 26, 2006
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5...CVE-2006-67374.3 MediumDecember 26, 2006
sun jdk, jre, sdk +2 moreUnspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5...CVE-2006-67364.3 MediumDecember 26, 2006
obie website mini web shopmodules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote...CVE-2006-67355.0 MediumDecember 26, 2006
obie website mini web shopCross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie...CVE-2006-6734Public exploit4.3 MediumDecember 26, 2006
osticket stsCross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows...CVE-2006-6733Public exploit4.3 MediumDecember 26, 2006
cwm-design cwmvotePHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to...CVE-2006-6732Public exploit6.8 MediumDecember 26, 2006
sun jdk, jre, sdk +2 moreMultiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5...CVE-2006-67319.3 HighDecember 26, 2006
netbsd, openbsd +1 moreOpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev...CVE-2006-67306.6 MediumDecember 26, 2006
a-blogCross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to...CVE-2006-6729Public exploit4.3 MediumDecember 26, 2006
lan messenger messengerUnspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows...CVE-2006-67286.4 MediumDecember 26, 2006
inertianewsPHP remote file inclusion vulnerability in inertianews_class.php in inertianews 0.02 beta and...CVE-2006-67277.5 HighDecember 26, 2006
inertianewsPHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows...CVE-2006-6726Public exploit7.5 HighDecember 26, 2006
phpbuilderMultiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote...CVE-2006-67255.0 MediumDecember 26, 2006
bolintech dream ftp serverBolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to...CVE-2006-6724Public exploit4.0 MediumDecember 26, 2006
microsoft windows 2000, windows xp +1 moreThe Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause...CVE-2006-6723Public exploitEPSS 37.2%7.8 HighDecember 26, 2006
jelle de vos bandwebsiteBandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative...CVE-2006-6722Public exploit7.5 HighDecember 23, 2006
knusperleicht shoutboxMultiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6...CVE-2006-6721Public exploit6.8 MediumDecember 23, 2006
azucar cms cmsPHP remote file inclusion vulnerability in admin/index_sitios.php in Azucar CMS 1.3 allows remote...CVE-2006-6720Public exploit7.5 HighDecember 23, 2006
gnu wgetThe ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows...CVE-2006-6719Public exploitFix available5.0 MediumDecember 23, 2006
alliedtelesyn at-9000 24 ethernetswitchThe Allied Telesis AT-9000/24 Ethernet switch has a default password for its admin account, ...CVE-2006-67187.5 HighDecember 23, 2006
alliedtelesyn at-9000 24 ethernetswitchThe Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs,...CVE-2006-67177.5 HighDecember 23, 2006
eric guillaume upload download de fichiersSQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader...CVE-2006-6716Public exploit7.5 HighDecember 23, 2006
powerscripts powerclanPHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when...CVE-2006-6715Public exploit5.1 MediumDecember 23, 2006
hitachi directory server 2Multiple memory leaks in Hitachi Directory Server 2 P-2444-A124 before 02-11-/K on Windows, and P...CVE-2006-67147.8 HighDecember 23, 2006
hitachi directory server 2Buffer overflow in Hitachi Directory Server 2 P-2444-A124 before 02-11-/K on Windows, and P-1B44...CVE-2006-671310.0 HighDecember 23, 2006
sugarcrmCross-site scripting (XSS) vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote...CVE-2006-67126.8 MediumDecember 23, 2006
newxooperPHP remote file inclusion vulnerability in compteur/mapage.php in Newxooper 0.9.1 allows remote...CVE-2006-6711Public exploit7.5 HighDecember 23, 2006
matteolucarelli pgmreloadedMultiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote...CVE-2006-6710Public exploit7.5 HighDecember 23, 2006
mginternet property site managerMultiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers...CVE-2006-6709Public exploit7.5 HighDecember 23, 2006
mginternet property site managerCross-site scripting (XSS) vulnerability in listings.asp in MGinternet Property Site Manager...CVE-2006-6708Public exploit6.8 MediumDecember 23, 2006
mcafee neotrace, visual trace +1 moreStack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control ...CVE-2006-6707Public exploitEPSS 56.2%7.5 HighDecember 23, 2006
soumu koukyoumuke soumu workflow, workflow, soumo workflow +2 moreSQL injection vulnerability in Soumu Workflow for Groupmax 01-00 through 01-01, Soumu Workflow 02...CVE-2006-67066.5 MediumDecember 23, 2006
soumu koukyoumuke soumu workflow, workflow, soumo workflow +2 moreMultiple unspecified vulnerabilities in the template files in Soumu Workflow for Groupmax 01-00...CVE-2006-67055.0 MediumDecember 23, 2006
atmail webadminCross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote...CVE-2006-67046.8 MediumDecember 23, 2006
oracle oracle10g, oracle9i +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote...CVE-2006-6703Public exploit6.8 MediumDecember 23, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open