Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
December

CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

x.org, xfree86 project xfree86 +1 moreInteger overflow in the ProcRenderAddGlyphs function in the Render extension for X.Org 6.8.2, 6.9...CVE-2006-6101Fix available6.6 MediumDecember 31, 2006
fetchmailfetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option,...CVE-2006-5974Fix available7.8 HighDecember 31, 2006
openoffice, sun staroffice +1 moreMultiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions...CVE-2006-5870Fix available9.3 HighDecember 31, 2006
fetchmailfetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords...CVE-2006-5867Fix available7.8 HighDecember 31, 2006
adobe coldfusion, jrun +1 moreAdobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote...CVE-2006-5858EPSS 13.6%5.0 MediumDecember 31, 2006
adobe acrobat, acrobat reader +1 moreAdobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code...CVE-2006-58579.3 HighDecember 31, 2006
linux kernelLinux kernel before 2.6.18, when running on x86_64 systems, does not properly save or restore...CVE-2006-57554.9 MediumDecember 31, 2006
linux kernelThe isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel...CVE-2006-57491.7 LowDecember 31, 2006
microsoft office, visio, office multilingual user interface pack +2 more +4 moreUnspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003...CVE-2006-5574EPSS 24.1%9.3 HighDecember 31, 2006
microsoft dynamics gpMultiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow...CVE-2006-5266EPSS 15.7%7.5 HighDecember 31, 2006
microsoft dynamics gpUnspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows...CVE-2006-5265EPSS 10.4%5.0 MediumDecember 31, 2006
tumbleweed email firewallCross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF...CVE-2006-47274.3 MediumDecember 31, 2006
microsoft office web componentsUnspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows...CVE-2006-4695EPSS 40.1%9.3 HighDecember 31, 2006
the address book address bookCross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers...CVE-2006-45825.0 MediumDecember 31, 2006
the address book address bookUnrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type...CVE-2006-45815.0 MediumDecember 31, 2006
the address book address bookregister.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self...CVE-2006-45807.5 HighDecember 31, 2006
the address book address bookDirectory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers...CVE-2006-45795.0 MediumDecember 31, 2006
the address book address bookexport.php in The Address Book 1.04e writes username and password hash information into a...CVE-2006-45787.5 HighDecember 31, 2006
the address book address bookMultiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote...CVE-2006-45776.8 MediumDecember 31, 2006
the address book address bookCross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to...CVE-2006-45766.8 MediumDecember 31, 2006
the address book address bookMultiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to...CVE-2006-45757.5 HighDecember 31, 2006
novell groupwise, groupwise webaccess +1 moreMultiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess...CVE-2006-4220Public exploit4.3 MediumDecember 31, 2006
cisco secure access control serverStack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS)...CVE-2006-4098EPSS 12.9%10.0 HighDecember 31, 2006
cisco secure access control serverMultiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control...CVE-2006-40977.8 HighDecember 31, 2006
microsoft outlook, office +1 moreMicrosoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of...CVE-2006-1305EPSS 32.4%4.3 MediumDecember 31, 2006
personal .net portal .net portalUnspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown...CVE-2006-68267.5 HighDecember 29, 2006
mxmania calendar mx basicCalendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with...CVE-2006-68257.5 HighDecember 29, 2006
php icalendar icalendarMultiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23...CVE-2006-6824Public exploit4.3 MediumDecember 29, 2006
yrchPHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows...CVE-2006-6823Public exploit7.5 HighDecember 29, 2006
enthrallweb eclassifiedsmyprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter...CVE-2006-6822Public exploit3.5 LowDecember 29, 2006
enthrallweb enewsmyprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during...CVE-2006-6821Public exploit3.5 LowDecember 29, 2006
enthrallweb ecouponsmyprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during...CVE-2006-6820Public exploit3.5 LowDecember 29, 2006
alstrasoft webhost directoryAlstraSoft Web Host Directory stores sensitive information under the web root with insufficient...CVE-2006-6819Public exploit6.4 MediumDecember 29, 2006
alstrasoft webhost directoryAlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the...CVE-2006-68187.5 HighDecember 29, 2006
alstrasoft webhost directoryAlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by...CVE-2006-68175.0 MediumDecember 29, 2006
dmxready secure login managerMultiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote...CVE-2006-6816Public exploit7.5 HighDecember 29, 2006
dmxready secure login managerMultiple cross-site scripting (XSS) vulnerabilities in DMXReady Secure Login Manager 1.0 allow...CVE-2006-68156.0 MediumDecember 29, 2006
hosting controller controllerDirectory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c...CVE-2006-6814Public exploit6.3 MediumDecember 29, 2006
mxmania file upload managerSQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier...CVE-2006-6813Public exploit7.5 HighDecember 29, 2006
myphpcalendarMultiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers...CVE-2006-6812Public exploit7.5 HighDecember 29, 2006
kde ksirc, canonical ubuntu linux +1 moreKsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG...CVE-2006-6811Public exploitEPSS 10.6%6.5 MediumDecember 29, 2006
db hub hubUnspecified vulnerability in the clear_user_list function in src/main.c in DB Hub 0.3 allows...CVE-2006-6810Public exploit5.0 MediumDecember 29, 2006
vladimir menshakov buratinable templatorMultiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov...CVE-2006-6809Public exploit7.5 HighDecember 29, 2006
wordpressCross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows...CVE-2006-6808Public exploitFix available6.8 MediumDecember 28, 2006
softwebs nepal ananda real estateSQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real...CVE-2006-6807Public exploit7.5 HighDecember 28, 2006
enthrallweb ematesSQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers...CVE-2006-6806Public exploit7.5 HighDecember 28, 2006
enthrallweb ejobsSQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to...CVE-2006-6805Public exploit7.5 HighDecember 28, 2006
enthrallweb dragon business directory proSQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon...CVE-2006-6804Public exploit7.5 HighDecember 28, 2006
enthrallweb ecarsSQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to...CVE-2006-6803Public exploit7.5 HighDecember 28, 2006
enthrallweb epagesSQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to...CVE-2006-6802Public exploit7.5 HighDecember 28, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open