# Vulnerabilities published in 2006 - [CVE-2006-7049](https://insights.sbomify.com/CVE-2006-7049/): Path traversal in n/a (high 7.5) - [CVE-2006-7048](https://insights.sbomify.com/CVE-2006-7048/): Code injection in n/a (high 7.5) - [CVE-2006-7047](https://insights.sbomify.com/CVE-2006-7047/): Security feature bypass in n/a (medium 5.0) - [CVE-2006-7046](https://insights.sbomify.com/CVE-2006-7046/): Code injection in n/a (critical 9.3) - [CVE-2006-7045](https://insights.sbomify.com/CVE-2006-7045/): Code injection in n/a (high 7.5) - [CVE-2006-7044](https://insights.sbomify.com/CVE-2006-7044/): Code injection in n/a (high 7.5) - [CVE-2006-7043](https://insights.sbomify.com/CVE-2006-7043/): Cross-site scripting in n/a (low 3.5) - [CVE-2006-7042](https://insights.sbomify.com/CVE-2006-7042/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-7041](https://insights.sbomify.com/CVE-2006-7041/): Denial of service in n/a (high 7.8) - [CVE-2006-7040](https://insights.sbomify.com/CVE-2006-7040/): Denial of service in n/a (high 7.8) - [CVE-2006-7039](https://insights.sbomify.com/CVE-2006-7039/): Denial of service in n/a (medium 5.0) - [CVE-2006-7038](https://insights.sbomify.com/CVE-2006-7038/): Memory corruption in n/a (high 7.8) - [CVE-2006-7037](https://insights.sbomify.com/CVE-2006-7037/): Security feature bypass in n/a (medium 4.4) - [CVE-2006-7036](https://insights.sbomify.com/CVE-2006-7036/): File upload in n/a (critical 10.0) - [CVE-2006-7035](https://insights.sbomify.com/CVE-2006-7035/): Path traversal in n/a (high 7.8) - [CVE-2006-7034](https://insights.sbomify.com/CVE-2006-7034/): SQL injection in n/a (high 7.5) - [CVE-2006-7033](https://insights.sbomify.com/CVE-2006-7033/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-7032](https://insights.sbomify.com/CVE-2006-7032/): Code injection in n/a (critical 10.0) - [CVE-2006-7031](https://insights.sbomify.com/CVE-2006-7031/): Denial of service in n/a (medium 6.5) - [CVE-2006-7030](https://insights.sbomify.com/CVE-2006-7030/): Null dereference in n/a (medium 5.0) - [CVE-2006-7029](https://insights.sbomify.com/CVE-2006-7029/): Denial of service in n/a (medium 5.0) - [CVE-2006-7028](https://insights.sbomify.com/CVE-2006-7028/): Denial of service in n/a (high 7.8) - [CVE-2006-7027](https://insights.sbomify.com/CVE-2006-7027/): Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which al (critical 10.0) - [CVE-2006-7026](https://insights.sbomify.com/CVE-2006-7026/): File upload in n/a (medium 6.8) - [CVE-2006-7025](https://insights.sbomify.com/CVE-2006-7025/): SQL injection in n/a (high 7.5) - [CVE-2006-7024](https://insights.sbomify.com/CVE-2006-7024/): Code injection in n/a (high 7.5) - [CVE-2006-7023](https://insights.sbomify.com/CVE-2006-7023/): Cross-site scripting in n/a (medium 4.3) - [CVE-2006-7022](https://insights.sbomify.com/CVE-2006-7022/): Cross-site scripting in n/a (critical 10.0) - [CVE-2006-7021](https://insights.sbomify.com/CVE-2006-7021/): Code injection in n/a (high 7.5) - [CVE-2006-7020](https://insights.sbomify.com/CVE-2006-7020/): Other in n/a (high 7.8) - [CVE-2006-7019](https://insights.sbomify.com/CVE-2006-7019/): Code injection in n/a (high 7.5) - [CVE-2006-7018](https://insights.sbomify.com/CVE-2006-7018/): Code injection in n/a (critical 10.0) - [CVE-2006-7017](https://insights.sbomify.com/CVE-2006-7017/): File upload in n/a (high 7.5) - [CVE-2006-7016](https://insights.sbomify.com/CVE-2006-7016/): Auth bypass in n/a (high 7.5) - [CVE-2006-7015](https://insights.sbomify.com/CVE-2006-7015/): Code injection in n/a (critical 10.0) - [CVE-2006-7014](https://insights.sbomify.com/CVE-2006-7014/): Auth bypass in n/a (high 7.5) - [CVE-2006-7013](https://insights.sbomify.com/CVE-2006-7013/): Security feature bypass in n/a (high 7.5) - [CVE-2006-7012](https://insights.sbomify.com/CVE-2006-7012/): scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show_text action. (critical 10.0) - [CVE-2006-7011](https://insights.sbomify.com/CVE-2006-7011/): File upload in n/a (high 7.5) - [CVE-2006-7010](https://insights.sbomify.com/CVE-2006-7010/): SQL injection in n/a (high 7.5) - [CVE-2006-7009](https://insights.sbomify.com/CVE-2006-7009/): Business logic in n/a (high 7.5) - [CVE-2006-7008](https://insights.sbomify.com/CVE-2006-7008/): Unspecified vulnerability in Joomla! (high 7.5) - [CVE-2006-7007](https://insights.sbomify.com/CVE-2006-7007/): Denial of service in n/a (high 7.8) - [CVE-2006-7006](https://insights.sbomify.com/CVE-2006-7006/): Code injection in n/a (high 7.5) - [CVE-2006-7005](https://insights.sbomify.com/CVE-2006-7005/): SQL injection in n/a (high 7.5) - [CVE-2006-7004](https://insights.sbomify.com/CVE-2006-7004/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-7003](https://insights.sbomify.com/CVE-2006-7003/): Code injection in n/a (high 7.5) - [CVE-2006-7002](https://insights.sbomify.com/CVE-2006-7002/): Cross-site scripting in n/a (medium 4.3) - [CVE-2006-7001](https://insights.sbomify.com/CVE-2006-7001/): Path traversal in n/a (high 7.1) - [CVE-2006-7000](https://insights.sbomify.com/CVE-2006-7000/): Information disclosure in n/a (medium 5.0) - [CVE-2006-6999](https://insights.sbomify.com/CVE-2006-6999/): Information disclosure in n/a (medium 4.3) - [CVE-2006-6998](https://insights.sbomify.com/CVE-2006-6998/): Information disclosure in n/a (medium 5.0) - [CVE-2006-6997](https://insights.sbomify.com/CVE-2006-6997/): Weak cryptography in n/a (critical 10.0) - [CVE-2006-6996](https://insights.sbomify.com/CVE-2006-6996/): Cross-site scripting in n/a (medium 4.3) - [CVE-2006-6995](https://insights.sbomify.com/CVE-2006-6995/): Privilege escalation in n/a (medium 6.0) - [CVE-2006-6994](https://insights.sbomify.com/CVE-2006-6994/): File upload in n/a (medium 6.4) - [CVE-2006-6993](https://insights.sbomify.com/CVE-2006-6993/): SQL injection in n/a (high 7.5) - [CVE-2006-6992](https://insights.sbomify.com/CVE-2006-6992/): Information disclosure in n/a (high 7.8) - [CVE-2006-6991](https://insights.sbomify.com/CVE-2006-6991/): Cross-site scripting in n/a (high 7.8) - [CVE-2006-6990](https://insights.sbomify.com/CVE-2006-6990/): Cross-site scripting in n/a (high 7.8) - [CVE-2006-6989](https://insights.sbomify.com/CVE-2006-6989/): Cross-site scripting in n/a (high 7.8) - [CVE-2006-6988](https://insights.sbomify.com/CVE-2006-6988/): Information disclosure in n/a (high 7.8) - [CVE-2006-6987](https://insights.sbomify.com/CVE-2006-6987/): Cross-site scripting in n/a (high 7.8) - [CVE-2006-6986](https://insights.sbomify.com/CVE-2006-6986/): Cross-site scripting in n/a (high 7.8) - [CVE-2006-6985](https://insights.sbomify.com/CVE-2006-6985/): Information disclosure in n/a (medium 5.0) - [CVE-2006-6984](https://insights.sbomify.com/CVE-2006-6984/): Cross-site scripting in n/a (medium 5.0) - [CVE-2006-6983](https://insights.sbomify.com/CVE-2006-6983/): Information disclosure in n/a (medium 5.0) - [CVE-2006-6982](https://insights.sbomify.com/CVE-2006-6982/): Weak cryptography in n/a (medium 5.0) - [CVE-2006-6981](https://insights.sbomify.com/CVE-2006-6981/): Denial of service in n/a (medium 5.0) - [CVE-2006-6980](https://insights.sbomify.com/CVE-2006-6980/): Denial of service in n/a (low 2.6) - [CVE-2006-6979](https://insights.sbomify.com/CVE-2006-6979/): Command injection in n/a (high 7.5) - [CVE-2006-6978](https://insights.sbomify.com/CVE-2006-6978/): Cross-site scripting in n/a (medium 4.3) - [CVE-2006-6977](https://insights.sbomify.com/CVE-2006-6977/): Cross-site scripting in n/a (medium 4.3) - [CVE-2006-6976](https://insights.sbomify.com/CVE-2006-6976/): Code injection in n/a (high 7.5) - [CVE-2006-6975](https://insights.sbomify.com/CVE-2006-6975/): Code injection in n/a (critical 9.8) - [CVE-2006-6974](https://insights.sbomify.com/CVE-2006-6974/): Information disclosure in n/a (high 7.5) - [CVE-2006-6973](https://insights.sbomify.com/CVE-2006-6973/): Missing authorization in n/a (high 7.5) - [CVE-2006-6972](https://insights.sbomify.com/CVE-2006-6972/): SQL injection in n/a (high 7.5) - [CVE-2006-6971](https://insights.sbomify.com/CVE-2006-6971/): Security feature bypass in n/a (medium 5.0) - [CVE-2006-6970](https://insights.sbomify.com/CVE-2006-6970/): Security feature bypass in n/a (medium 5.0) - [CVE-2006-6969](https://insights.sbomify.com/CVE-2006-6969/): Jetty Uses Predictable Session Identifiers (medium 6.8) - [CVE-2006-6968](https://insights.sbomify.com/CVE-2006-6968/): Cross-site scripting in n/a (medium 5.8) - [CVE-2006-6966](https://insights.sbomify.com/CVE-2006-6966/): File upload in n/a (high 7.5) - [CVE-2006-6965](https://insights.sbomify.com/CVE-2006-6965/): Cross-site scripting in n/a (medium 4.3) - [CVE-2006-6964](https://insights.sbomify.com/CVE-2006-6964/): Information disclosure in n/a (medium 4.0) - [CVE-2006-6963](https://insights.sbomify.com/CVE-2006-6963/): Code injection in n/a (high 7.5) - [CVE-2006-6962](https://insights.sbomify.com/CVE-2006-6962/): Code injection in n/a (medium 6.8) - [CVE-2006-6961](https://insights.sbomify.com/CVE-2006-6961/): Security feature bypass in n/a (medium 6.8) - [CVE-2006-6960](https://insights.sbomify.com/CVE-2006-6960/): Security feature bypass in n/a (medium 6.8) - [CVE-2006-6959](https://insights.sbomify.com/CVE-2006-6959/): Security feature bypass in n/a (medium 4.6) - [CVE-2006-6958](https://insights.sbomify.com/CVE-2006-6958/): Code injection in n/a (high 7.5) - [CVE-2006-6957](https://insights.sbomify.com/CVE-2006-6957/): Code injection in n/a (medium 6.8) - [CVE-2006-6956](https://insights.sbomify.com/CVE-2006-6956/): Denial of service in n/a (medium 4.3) - [CVE-2006-6955](https://insights.sbomify.com/CVE-2006-6955/): Denial of service in n/a (medium 4.3) - [CVE-2006-6954](https://insights.sbomify.com/CVE-2006-6954/): Denial of service in n/a (medium 4.3) - [CVE-2006-6953](https://insights.sbomify.com/CVE-2006-6953/): Information disclosure in n/a (low 2.1) - [CVE-2006-6952](https://insights.sbomify.com/CVE-2006-6952/): Privilege escalation in n/a (high 7.2) - [CVE-2006-6951](https://insights.sbomify.com/CVE-2006-6951/): Cross-site scripting in n/a (medium 6.8) - [CVE-2006-6950](https://insights.sbomify.com/CVE-2006-6950/): Path traversal in n/a (medium 5.0) - [CVE-2006-6949](https://insights.sbomify.com/CVE-2006-6949/): Information disclosure in n/a (medium 4.6) --- From sbomify Insights: https://insights.sbomify.com/years/2006/page/3/