Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
December

CVEs published in December 2006

779 vulnerabilities, 90 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

avahiThe consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to...CVE-2006-6870Fix available5.0 MediumDecember 31, 2006
maxdev mdforumDirectory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1...CVE-2006-6869Public exploit9.3 HighDecember 31, 2006
zen cart web shopping cartMultiple cross-site scripting (XSS) vulnerabilities in Zen Cart Web Shopping Cart before 1.3.7...CVE-2006-68686.8 MediumDecember 31, 2006
vladimir meshakov bublaMultiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov buratinable templator ...CVE-2006-6867Public exploit7.5 HighDecember 31, 2006
stphp easynewsSTphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access...CVE-2006-6866Public exploit7.8 HighDecember 31, 2006
softartisans fileupDirectory traversal vulnerability in SAFileUpSamples/util/viewsrc.asp in SoftArtisans FileUp ...CVE-2006-6865Public exploit7.8 HighDecember 31, 2006
enigma2 coppermine bridgePHP remote file inclusion vulnerability in E2_header.inc.php in Enigma2 Coppermine Bridge 1.0...CVE-2006-6864Public exploit10.0 HighDecember 31, 2006
enigma wordpress bridge** DISPUTED ** PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in...CVE-2006-6863Public exploitDisputedEPSS 13.1%10.0 HighDecember 31, 2006
outfront spooky loginMultiple cross-site scripting (XSS) vulnerabilities in Outfront Spooky Login 2.7 allow remote...CVE-2006-68626.8 MediumDecember 31, 2006
outfront spooky loginMultiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to...CVE-2006-6861Public exploit10.0 HighDecember 31, 2006
mythcontrolBuffer overflow in the sendToMythTV function in MythControlServer.c in MythControl 1.0 and...CVE-2006-686010.0 HighDecember 31, 2006
website designs for less click n print couponsSQL injection vulnerability in coupon_detail.asp in Website Designs For Less Click N' Print...CVE-2006-6859Public exploit10.0 HighDecember 31, 2006
miredoMiredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole...CVE-2006-6858Fix available6.8 MediumDecember 31, 2006
docebolmsCross-site scripting (XSS) vulnerability in modules/credits/credits.php in Docebo LMS allows...CVE-2006-68574.3 MediumDecember 31, 2006
webtextDirect static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote...CVE-2006-6856Public exploit7.5 HighDecember 31, 2006
aidex mini-webserverAIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service ...CVE-2006-6855Public exploit5.0 MediumDecember 31, 2006
de marchi daniele quickcamThe qcamvc_video_init function in qcamvc.c in De Marchi Daniele QuickCam VC Linux device driver ...CVE-2006-68547.5 HighDecember 31, 2006
mozilla durian web application serverBuffer overflow in Durian Web Application Server 3.02 freeware on Windows allows remote attackers...CVE-2006-6853Public exploit10.0 HighDecember 31, 2006
tdiaryEval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated...CVE-2006-6852Fix available6.0 MediumDecember 31, 2006
mobilelib goldMultiple cross-site scripting (XSS) vulnerabilities in contact_us.php in ac4p Mobilelib gold 2...CVE-2006-6851Public exploit6.8 MediumDecember 31, 2006
shadowed works portalPHP remote file inclusion vulnerability in include.php in the Roster Module (character_roster) in...CVE-2006-6850Public exploit7.5 HighDecember 31, 2006
cahier de textes de textesadministration/index.php in Cahier de texte (CDT) 2.2 does not properly exit when authentication...CVE-2006-6849Public exploit7.5 HighDecember 31, 2006
asptickerSQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute...CVE-2006-6848Public exploit7.5 HighDecember 31, 2006
realnetworks realplayerAn ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to...CVE-2006-6847Public exploit5.0 MediumDecember 31, 2006
cybercoded while you were out inout boardMultiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote...CVE-2006-6846Public exploit7.5 HighDecember 31, 2006
cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote...CVE-2006-6845Public exploit6.8 MediumDecember 31, 2006
cmsmadesimple cms made simpleCross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1...CVE-2006-68446.8 MediumDecember 31, 2006
joomla be it easypartner componentPHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla!...CVE-2006-68437.5 HighDecember 31, 2006
codemonkeyx acronym modSQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus...CVE-2006-6842Public exploit7.5 HighDecember 31, 2006
phpbb group phpbbCertain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote...CVE-2006-684110.0 HighDecember 31, 2006
phpbb group phpbbUnspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors...CVE-2006-684010.0 HighDecember 31, 2006
phpbb group phpbbUnspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors...CVE-2006-683910.0 HighDecember 31, 2006
rediff bol downloader activex ocx controlRediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files,...CVE-2006-6838Public exploit7.5 HighDecember 31, 2006
sergey oblomov iso wincmdMultiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree...CVE-2006-68376.8 MediumDecember 31, 2006
ibm os 400Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and...CVE-2006-683610.0 HighDecember 31, 2006
neocrome land down underSQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier...CVE-2006-68357.5 HighDecember 31, 2006
joomlaMultiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack...CVE-2006-68346.8 MediumDecember 31, 2006
joomlacom_categories in Joomla! before 1.0.12 does not validate input, which has unknown impact and...CVE-2006-68337.5 HighDecember 31, 2006
joomlaCross-site scripting (XSS) vulnerability in Joomla! before 1.0.12 allows remote attackers to...CVE-2006-68324.3 MediumDecember 31, 2006
alan ward a-faqSQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute...CVE-2006-6831Public exploit7.5 HighDecember 31, 2006
cafelog b2 blogPHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows...CVE-2006-6830Public exploit7.5 HighDecember 31, 2006
efkan forum forumEfkan Forum 1.0 and earlier store sensitive information under the web root with insufficient...CVE-2006-68297.8 HighDecember 31, 2006
efkan forum forumMultiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to...CVE-2006-68287.5 HighDecember 31, 2006
macromedia flash playerFlash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet...CVE-2006-6827Public exploit5.0 MediumDecember 31, 2006
iconics dialog wrapper module activex controlStack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control ...CVE-2006-6488Public exploit7.5 HighDecember 31, 2006
eudora worldmail management serverHeap-based buffer overflow in the Mail Management Server (MAILMA.exe) in Eudora WorldMail 3.1.x...CVE-2006-633610.0 HighDecember 31, 2006
mit kerberos 5The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as...CVE-2006-61445.0 MediumDecember 31, 2006
mit kerberos 5, canonical ubuntu linux +1 moreThe RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos...CVE-2006-6143Fix available9.3 HighDecember 31, 2006
x.org, xfree86 project xfree86 +1 moreInteger overflow in the ProcDbeSwapBuffers function in the DBE extension for X.Org 6.8.2, 6.9.0,...CVE-2006-6103Fix available6.6 MediumDecember 31, 2006
x.org, xfree86 project x server +1 moreInteger overflow in the ProcDbeGetVisualInfo function in the DBE extension for X.Org 6.8.2, 6.9.0...CVE-2006-6102Fix available10.0 HighDecember 31, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open