# Vulnerabilities published in 2006


- [CVE-2006-3704](https://insights.sbomify.com/CVE-2006-3704/): Other in oracle:database server (critical 10.0)
- [CVE-2006-3703](https://insights.sbomify.com/CVE-2006-3703/): Other in oracle:database server (critical 9.0)
- [CVE-2006-3702](https://insights.sbomify.com/CVE-2006-3702/): Other in oracle:database server (critical 10.0)
- [CVE-2006-3701](https://insights.sbomify.com/CVE-2006-3701/): Other in oracle:database server (critical 9.0)
- [CVE-2006-3700](https://insights.sbomify.com/CVE-2006-3700/): Other in oracle:database server (critical 10.0)
- [CVE-2006-3699](https://insights.sbomify.com/CVE-2006-3699/): Other in oracle:database server (critical 9.0)
- [CVE-2006-3698](https://insights.sbomify.com/CVE-2006-3698/): SQL injection in oracle:database server (critical 10.0)
- [CVE-2006-3697](https://insights.sbomify.com/CVE-2006-3697/): Privilege escalation in agnitum:outpost firewall (high 7.2)
- [CVE-2006-3696](https://insights.sbomify.com/CVE-2006-3696/): Denial of service in agnitum:outpost firewall (low 2.1)
- [CVE-2006-3695](https://insights.sbomify.com/CVE-2006-3695/): Trac reStructuredText breach of privacy and denial of service vulnerability (medium 6.8)
- [CVE-2006-3694](https://insights.sbomify.com/CVE-2006-3694/): Security feature bypass in yukihiro matsumoto:ruby (medium 6.4)
- [CVE-2006-3693](https://insights.sbomify.com/CVE-2006-3693/): Command injection in rocks clusters:rocks clusters (medium 4.6)
- [CVE-2006-3692](https://insights.sbomify.com/CVE-2006-3692/): Code injection in silentweb:listmessenger (high 7.5)
- [CVE-2006-3691](https://insights.sbomify.com/CVE-2006-3691/): SQL injection in vbzoom:vbzoom (high 7.5)
- [CVE-2006-3690](https://insights.sbomify.com/CVE-2006-3690/): Code injection in minibb:forum (high 7.5)
- [CVE-2006-3689](https://insights.sbomify.com/CVE-2006-3689/): Code injection in codeworks:gnomedia subberz (high 7.5)
- [CVE-2006-3688](https://insights.sbomify.com/CVE-2006-3688/): SQL injection in francisco charrua:photo-gallery (high 7.5)
- [CVE-2006-3687](https://insights.sbomify.com/CVE-2006-3687/): Memory corruption in d-link:di-604 broadband router (high 7.5)
- [CVE-2006-3686](https://insights.sbomify.com/CVE-2006-3686/): Denial of service in hp:openvms (medium 5.0)
- [CVE-2006-3685](https://insights.sbomify.com/CVE-2006-3685/): Code injection in czaries network:czarnews (medium 5.1)
- [CVE-2006-3684](https://insights.sbomify.com/CVE-2006-3684/): Code injection in softcomplex:php event calendar (high 7.5)
- [CVE-2006-3683](https://insights.sbomify.com/CVE-2006-3683/): Code injection in flipper poll:flipper poll (high 7.5)
- [CVE-2006-3682](https://insights.sbomify.com/CVE-2006-3682/): Information disclosure in awstats:awstats (medium 5.0)
- [CVE-2006-3681](https://insights.sbomify.com/CVE-2006-3681/): Cross-site scripting in awstats:awstats (low 2.6)
- [CVE-2006-3680](https://insights.sbomify.com/CVE-2006-3680/): Cross-site scripting in photocycle:photocycle (low 2.6)
- [CVE-2006-3679](https://insights.sbomify.com/CVE-2006-3679/): Auth bypass in fatwire:fatwire content server (high 7.5)
- [CVE-2006-3678](https://insights.sbomify.com/CVE-2006-3678/): Denial of service in 3com:tippingpoint ips tos (medium 5.0)
- [CVE-2006-3677](https://insights.sbomify.com/CVE-2006-3677/): Memory corruption in mozilla:firefox (high 7.5)
- [CVE-2006-3676](https://insights.sbomify.com/CVE-2006-3676/): File upload in planet concept:planetgallery (medium 5.1)
- [CVE-2006-3675](https://insights.sbomify.com/CVE-2006-3675/): Security feature bypass in counterpane:passwordsafe (low 2.1)
- [CVE-2006-3674](https://insights.sbomify.com/CVE-2006-3674/): Denial of service in armagetron:armagetron advanced (high 7.8)
- [CVE-2006-3673](https://insights.sbomify.com/CVE-2006-3673/): Denial of service in armagetron:armagetron advanced (medium 5.0)
- [CVE-2006-3672](https://insights.sbomify.com/CVE-2006-3672/): Null dereference in kde:konqueror (low 2.6)
- [CVE-2006-3671](https://insights.sbomify.com/CVE-2006-3671/): Cross-site request forgery in hyper estraier:hyper estraier (high 7.5)
- [CVE-2006-3670](https://insights.sbomify.com/CVE-2006-3670/): Memory corruption in rabox:winlpd (high 7.5)
- [CVE-2006-3669](https://insights.sbomify.com/CVE-2006-3669/): Information disclosure in mercury messenger:mercury messenger (low 2.1)
- [CVE-2006-3668](https://insights.sbomify.com/CVE-2006-3668/): Memory corruption in dynamic universal music bibliotheque:dumb (high 7.6)
- [CVE-2006-3667](https://insights.sbomify.com/CVE-2006-3667/): Other in sybase:financial fusion consumer banking solution (critical 10.0)
- [CVE-2006-3666](https://insights.sbomify.com/CVE-2006-3666/): SQL injection in myiosoft.com:ajaxportal (high 7.5)
- [CVE-2006-3665](https://insights.sbomify.com/CVE-2006-3665/): Other in squirrelmail:squirrelmail (medium 4.3)
- [CVE-2006-3664](https://insights.sbomify.com/CVE-2006-3664/): Denial of service in sun:solaris (medium 5.0)
- [CVE-2006-3663](https://insights.sbomify.com/CVE-2006-3663/): Information disclosure in finjan:vital security (medium 4.6)
- [CVE-2006-3662](https://insights.sbomify.com/CVE-2006-3662/): SQL injection in adaptive technology resource centre:atutor (high 7.5)
- [CVE-2006-3661](https://insights.sbomify.com/CVE-2006-3661/): Cross-site scripting in cutephp:cutenews (low 2.6)
- [CVE-2006-3660](https://insights.sbomify.com/CVE-2006-3660/): Other in microsoft:powerpoint (high 7.6)
- [CVE-2006-3659](https://insights.sbomify.com/CVE-2006-3659/): Denial of service in microsoft:ie (medium 5.0)
- [CVE-2006-3658](https://insights.sbomify.com/CVE-2006-3658/): Null dereference in microsoft:ie (medium 5.0)
- [CVE-2006-3657](https://insights.sbomify.com/CVE-2006-3657/): Memory corruption in microsoft:ie (medium 5.0)
- [CVE-2006-3656](https://insights.sbomify.com/CVE-2006-3656/): Memory corruption in microsoft:powerpoint (low 2.6)
- [CVE-2006-3655](https://insights.sbomify.com/CVE-2006-3655/): Other in microsoft:powerpoint (medium 5.1)
- [CVE-2006-3654](https://insights.sbomify.com/CVE-2006-3654/): Memory corruption in microsoft:works (low 2.6)
- [CVE-2006-3653](https://insights.sbomify.com/CVE-2006-3653/): Denial of service in microsoft:works (low 2.6)
- [CVE-2006-3652](https://insights.sbomify.com/CVE-2006-3652/): Security feature bypass in microsoft:isa server (high 7.5)
- [CVE-2006-3651](https://insights.sbomify.com/CVE-2006-3651/): Other in microsoft:office (critical 9.3)
- [CVE-2006-3650](https://insights.sbomify.com/CVE-2006-3650/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-3649](https://insights.sbomify.com/CVE-2006-3649/): Memory corruption in microsoft:visual basic (medium 5.1)
- [CVE-2006-3648](https://insights.sbomify.com/CVE-2006-3648/): Memory corruption in microsoft:windows 2000 (high 7.6)
- [CVE-2006-3647](https://insights.sbomify.com/CVE-2006-3647/): Integer overflow in microsoft:office (critical 9.3)
- [CVE-2006-3643](https://insights.sbomify.com/CVE-2006-3643/): Cross-site scripting in microsoft:ie (medium 6.0)
- [CVE-2006-3640](https://insights.sbomify.com/CVE-2006-3640/): Information disclosure in microsoft:ie (medium 5.0)
- [CVE-2006-3639](https://insights.sbomify.com/CVE-2006-3639/): Security feature bypass in microsoft:ie (high 7.5)
- [CVE-2006-3638](https://insights.sbomify.com/CVE-2006-3638/): Memory corruption in microsoft:ie (high 7.5)
- [CVE-2006-3637](https://insights.sbomify.com/CVE-2006-3637/): Memory corruption in microsoft:ie (medium 5.1)
- [CVE-2006-3636](https://insights.sbomify.com/CVE-2006-3636/): Cross-site scripting in gnu:mailman (medium 6.8)
- [CVE-2006-3635](https://insights.sbomify.com/CVE-2006-3635/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2006-3634](https://insights.sbomify.com/CVE-2006-3634/): Memory corruption in linux:linux kernel (medium 4.9)
- [CVE-2006-3633](https://insights.sbomify.com/CVE-2006-3633/): Command injection in ossp:shiela (medium 6.5)
- [CVE-2006-3632](https://insights.sbomify.com/CVE-2006-3632/): Memory corruption in ethereal group:ethereal (critical 10.0)
- [CVE-2006-3631](https://insights.sbomify.com/CVE-2006-3631/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2006-3630](https://insights.sbomify.com/CVE-2006-3630/): Memory corruption in wireshark:wireshark (high 7.5)
- [CVE-2006-3629](https://insights.sbomify.com/CVE-2006-3629/): Denial of service in ethereal group:ethereal (high 7.8)
- [CVE-2006-3628](https://insights.sbomify.com/CVE-2006-3628/): Memory corruption in ethereal group:ethereal (critical 10.0)
- [CVE-2006-3627](https://insights.sbomify.com/CVE-2006-3627/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2006-3626](https://insights.sbomify.com/CVE-2006-3626/): Race condition in linux:linux kernel (medium 6.2)
- [CVE-2006-3625](https://insights.sbomify.com/CVE-2006-3625/): Information disclosure in flv:flv player (medium 5.0)
- [CVE-2006-3624](https://insights.sbomify.com/CVE-2006-3624/): Cross-site scripting in flv:flv player (medium 4.3)
- [CVE-2006-3623](https://insights.sbomify.com/CVE-2006-3623/): Path traversal in mcafee:epolicy orchestrator agent (medium 5.0)
- [CVE-2006-3622](https://insights.sbomify.com/CVE-2006-3622/): Information disclosure in dream4:koobi pro (medium 5.0)
- [CVE-2006-3621](https://insights.sbomify.com/CVE-2006-3621/): SQL injection in dream4:koobi pro (high 7.5)
- [CVE-2006-3620](https://insights.sbomify.com/CVE-2006-3620/): Cross-site scripting in dream4:koobi pro (low 2.6)
- [CVE-2006-3619](https://insights.sbomify.com/CVE-2006-3619/): Path traversal in fastjar:fastjar (low 2.6)
- [CVE-2006-3618](https://insights.sbomify.com/CVE-2006-3618/): SQL injection in pixelated by lev:pixelated by lev guestbook (high 7.5)
- [CVE-2006-3617](https://insights.sbomify.com/CVE-2006-3617/): Cross-site scripting in pixelated by lev:pixelated by lev guestbook (medium 5.8)
- [CVE-2006-3616](https://insights.sbomify.com/CVE-2006-3616/): Cross-site scripting in carbonize:lazarus guestbook (medium 4.3)
- [CVE-2006-3615](https://insights.sbomify.com/CVE-2006-3615/): Code injection in phorum:phorum (medium 5.1)
- [CVE-2006-3614](https://insights.sbomify.com/CVE-2006-3614/): SQL injection in orbitcoders:orbitmatrix (high 7.5)
- [CVE-2006-3613](https://insights.sbomify.com/CVE-2006-3613/): Cross-site scripting in chamberland technology:ezwaiter online (medium 5.8)
- [CVE-2006-3612](https://insights.sbomify.com/CVE-2006-3612/): Cross-site scripting in phorum:phorum (low 2.6)
- [CVE-2006-3611](https://insights.sbomify.com/CVE-2006-3611/): Path traversal in phorum:phorum (medium 5.5)
- [CVE-2006-3610](https://insights.sbomify.com/CVE-2006-3610/): Information disclosure in orbitcoders:orbitmatrix (medium 5.0)
- [CVE-2006-3609](https://insights.sbomify.com/CVE-2006-3609/): Cross-site scripting in orbitcoders:orbitmatrix (medium 4.3)
- [CVE-2006-3608](https://insights.sbomify.com/CVE-2006-3608/): File upload in flatnuke:flatnuke (medium 4.6)
- [CVE-2006-3607](https://insights.sbomify.com/CVE-2006-3607/): Cross-site scripting in softbizscripts:banner exchange script (medium 4.3)
- [CVE-2006-3606](https://insights.sbomify.com/CVE-2006-3606/): Denial of service in sun:solaris (medium 5.0)
- [CVE-2006-3605](https://insights.sbomify.com/CVE-2006-3605/): Null dereference in microsoft:internet explorer (medium 5.0)
- [CVE-2006-3604](https://insights.sbomify.com/CVE-2006-3604/): Path traversal in seyeon:flexwatch network camera (high 7.5)
- [CVE-2006-3603](https://insights.sbomify.com/CVE-2006-3603/): Cross-site scripting in seyeon:flexwatch network camera (medium 5.8)
- [CVE-2006-3602](https://insights.sbomify.com/CVE-2006-3602/): Path traversal in farsinews:farsinews (medium 5.0)
- [CVE-2006-3601](https://insights.sbomify.com/CVE-2006-3601/): Privilege escalation in dnnsoftware:dotnetnuke (critical 10.0)
- [CVE-2006-3600](https://insights.sbomify.com/CVE-2006-3600/): Memory corruption in libtunepimp:libtunepimp (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/35/