2006 年に公開された CVE を表示しています。 CVE の一覧へ
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2006-7233 | Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possibly other versions before 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the url parameter. | 4.3 | 1.22% | 2006-12-31 | 2026-06-16 |
| CVE-2006-7232 | sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY. | 3.5 | 1.97% | 2006-12-31 | 2026-06-16 |
| CVE-2006-7231 | SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | 7.5 | 0.91% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6917 | Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0. | 10.0 | 29.35% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6916 | Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unknown vectors related to "crafted input." | 7.5 | 2.84% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6915 | ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service (port exhaustion) via unspecified vectors. NOTE: some details were obtained from third party sources. | 4.0 | 1.35% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6914 | Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain sensitive information, including passwords, via unspecified vectors. | 5.0 | 1.49% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6913 | Unspecified vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to upload arbitrary PHP scripts via unspecified vectors. | 7.5 | 1.36% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6912 | SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter. | 7.5 | 0.99% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6911 | SQL injection vulnerability in search.asp in Digitizing Quote And Ordering System 1.0 allows remote authenticated users to execute arbitrary SQL commands via the ordernum parameter. | 6.0 | 0.86% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6910 | formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter. | 7.8 | 3.02% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6909 | Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory listings with (1) long user names or (2) long group names. | 10.0 | 4.57% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6908 | Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450, allows remote attackers to cause a denial of service (service crash) and possibly execute arbitrary code via unspecified vectors. | 10.0 | 30.21% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6907 | Unspecified vulnerability in the Bluesoil Bluetooth stack has unknown impact and attack vectors. | 10.0 | 1.45% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6906 | Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact and local attack vectors, related to "Mach Exception Handling", a different issue than CVE-2006-6900. | 7.2 | 0.31% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6905 | Unspecified vulnerability in the Widcomm Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors. | 10.0 | 2.28% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6904 | Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors. | 7.9 | 0.79% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6903 | Unspecified vulnerability in the Toshiba Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors. | 10.0 | 2.15% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6902 | Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors. | 10.0 | 13.40% | 2006-12-31 | 2026-06-16 |
| CVE-2006-6901 | Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors. | 10.0 | 13.40% | 2006-12-31 | 2026-06-16 |