# Vulnerabilities published in 2006


- [CVE-2006-2459](https://insights.sbomify.com/CVE-2006-2459/): SQL injection in php fusion:php fusion (medium 6.4)
- [CVE-2006-2458](https://insights.sbomify.com/CVE-2006-2458/): Libextractor multiple heap-based buffer overflows (medium 4.0)
- [CVE-2006-2453](https://insights.sbomify.com/CVE-2006-2453/): Memory corruption in dia:dia (high 7.5)
- [CVE-2006-2452](https://insights.sbomify.com/CVE-2006-2452/): Auth bypass in gnome:gdm (low 3.7)
- [CVE-2006-2451](https://insights.sbomify.com/CVE-2006-2451/): Privilege escalation in linux:linux kernel (medium 4.6)
- [CVE-2006-2450](https://insights.sbomify.com/CVE-2006-2450/): Auth bypass in libvncserver:libvncserver (high 7.5)
- [CVE-2006-2449](https://insights.sbomify.com/CVE-2006-2449/): Path traversal in kde:kde (medium 4.0)
- [CVE-2006-2448](https://insights.sbomify.com/CVE-2006-2448/): Information disclosure in linux:linux kernel (medium 5.6)
- [CVE-2006-2447](https://insights.sbomify.com/CVE-2006-2447/): Command injection in apache:spamassassin (medium 5.1)
- [CVE-2006-2446](https://insights.sbomify.com/CVE-2006-2446/): Race condition in linux:linux kernel (medium 5.4)
- [CVE-2006-2445](https://insights.sbomify.com/CVE-2006-2445/): Race condition in linux:linux kernel (medium 4.0)
- [CVE-2006-2444](https://insights.sbomify.com/CVE-2006-2444/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2006-2443](https://insights.sbomify.com/CVE-2006-2443/): Misconfiguration in knowledgetree:knowledgetree (medium 4.6)
- [CVE-2006-2442](https://insights.sbomify.com/CVE-2006-2442/): Misconfiguration in kphone:kphone (medium 4.6)
- [CVE-2006-2441](https://insights.sbomify.com/CVE-2006-2441/): Denial of service in pioneers:pioneers meta-server (medium 5.0)
- [CVE-2006-2440](https://insights.sbomify.com/CVE-2006-2440/): Memory corruption in imagemagick:imagemagick (high 7.5)
- [CVE-2006-2439](https://insights.sbomify.com/CVE-2006-2439/): Memory corruption in zipcentral:zipcentral (high 7.6)
- [CVE-2006-2438](https://insights.sbomify.com/CVE-2006-2438/): Path traversal in caucho technology:resin (medium 5.0)
- [CVE-2006-2437](https://insights.sbomify.com/CVE-2006-2437/): Information disclosure in caucho technology:resin (medium 5.0)
- [CVE-2006-2436](https://insights.sbomify.com/CVE-2006-2436/): Information disclosure in ibm:websphere application server (high 7.5)
- [CVE-2006-2435](https://insights.sbomify.com/CVE-2006-2435/): Cross-site scripting in ibm:websphere application server (medium 6.4)
- [CVE-2006-2434](https://insights.sbomify.com/CVE-2006-2434/): Information disclosure in ibm:websphere application server (medium 5.0)
- [CVE-2006-2433](https://insights.sbomify.com/CVE-2006-2433/): Other in ibm:websphere application server (critical 10.0)
- [CVE-2006-2432](https://insights.sbomify.com/CVE-2006-2432/): Auth bypass in ibm:websphere application server (high 7.5)
- [CVE-2006-2431](https://insights.sbomify.com/CVE-2006-2431/): Cross-site scripting in ibm:websphere application server (medium 4.3)
- [CVE-2006-2430](https://insights.sbomify.com/CVE-2006-2430/): Information disclosure in ibm:websphere application server (critical 10.0)
- [CVE-2006-2429](https://insights.sbomify.com/CVE-2006-2429/): Other in ibm:websphere application server (critical 10.0)
- [CVE-2006-2428](https://insights.sbomify.com/CVE-2006-2428/): File upload in duware dubanner project:duware dubanner (high 7.5)
- [CVE-2006-2427](https://insights.sbomify.com/CVE-2006-2427/): Information disclosure in clam anti-virus:clamav (high 7.2)
- [CVE-2006-2426](https://insights.sbomify.com/CVE-2006-2426/): Denial of service in sun:jdk (medium 6.4)
- [CVE-2006-2425](https://insights.sbomify.com/CVE-2006-2425/): Cross-site scripting in phpremoteview:phpremoteview (medium 4.3)
- [CVE-2006-2424](https://insights.sbomify.com/CVE-2006-2424/): Code injection in ezusermanager:ezusermanager (medium 5.1)
- [CVE-2006-2423](https://insights.sbomify.com/CVE-2006-2423/): Cross-site scripting in swsoft:confixx (medium 4.3)
- [CVE-2006-2422](https://insights.sbomify.com/CVE-2006-2422/): Missing authorization in coinsoft technologies:phpcoin (medium 5.0)
- [CVE-2006-2421](https://insights.sbomify.com/CVE-2006-2421/): Memory corruption in pragma systems:fortressssh (high 7.5)
- [CVE-2006-2420](https://insights.sbomify.com/CVE-2006-2420/): Cross-site scripting in mozilla:bugzilla (medium 4.3)
- [CVE-2006-2419](https://insights.sbomify.com/CVE-2006-2419/): Cross-site scripting in php:directory listing script (medium 4.3)
- [CVE-2006-2418](https://insights.sbomify.com/CVE-2006-2418/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 6.8)
- [CVE-2006-2417](https://insights.sbomify.com/CVE-2006-2417/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 4.3)
- [CVE-2006-2416](https://insights.sbomify.com/CVE-2006-2416/): SQL injection in e107:e107 (medium 5.1)
- [CVE-2006-2415](https://insights.sbomify.com/CVE-2006-2415/): Cross-site scripting in flexchat:flexchat (medium 5.8)
- [CVE-2006-2414](https://insights.sbomify.com/CVE-2006-2414/): Path traversal in timo sirainen:dovecot (medium 5.0)
- [CVE-2006-2413](https://insights.sbomify.com/CVE-2006-2413/): Denial of service in gnunet:gnunet (medium 5.0)
- [CVE-2006-2412](https://insights.sbomify.com/CVE-2006-2412/): Memory corruption in raydium:raydium (medium 5.0)
- [CVE-2006-2411](https://insights.sbomify.com/CVE-2006-2411/): Memory corruption in raydium:raydium (high 7.5)
- [CVE-2006-2410](https://insights.sbomify.com/CVE-2006-2410/): Null dereference in raydium:raydium (medium 5.0)
- [CVE-2006-2409](https://insights.sbomify.com/CVE-2006-2409/): Memory corruption in raydium:raydium (medium 4.6)
- [CVE-2006-2408](https://insights.sbomify.com/CVE-2006-2408/): Memory corruption in raydium:raydium (high 7.5)
- [CVE-2006-2407](https://insights.sbomify.com/CVE-2006-2407/): Memory corruption in freeftpd:freeftpd (high 7.5)
- [CVE-2006-2406](https://insights.sbomify.com/CVE-2006-2406/): Path traversal in unclassified newsboard:unclassified newsboard (low 2.6)
- [CVE-2006-2405](https://insights.sbomify.com/CVE-2006-2405/): Path traversal in unclassified newsboard:unclassified newsboard (medium 6.8)
- [CVE-2006-2404](https://insights.sbomify.com/CVE-2006-2404/): Path traversal in radscripts:radlance (medium 6.4)
- [CVE-2006-2403](https://insights.sbomify.com/CVE-2006-2403/): Memory corruption in filezilla:filezilla (high 7.5)
- [CVE-2006-2402](https://insights.sbomify.com/CVE-2006-2402/): Memory corruption in outgun:outgun (medium 5.0)
- [CVE-2006-2401](https://insights.sbomify.com/CVE-2006-2401/): Memory corruption in outgun:outgun (high 7.8)
- [CVE-2006-2400](https://insights.sbomify.com/CVE-2006-2400/): Denial of service in outgun:outgun (high 7.8)
- [CVE-2006-2399](https://insights.sbomify.com/CVE-2006-2399/): Memory corruption in outgun:outgun (high 7.5)
- [CVE-2006-2398](https://insights.sbomify.com/CVE-2006-2398/): Path traversal in gphotos:gphotos (medium 5.0)
- [CVE-2006-2397](https://insights.sbomify.com/CVE-2006-2397/): Cross-site scripting in gphotos:gphotos (medium 5.8)
- [CVE-2006-2396](https://insights.sbomify.com/CVE-2006-2396/): Cross-site scripting in phpodp:phpodp (medium 5.8)
- [CVE-2006-2395](https://insights.sbomify.com/CVE-2006-2395/): Code injection in popsoft digital:popphoto (medium 5.0)
- [CVE-2006-2394](https://insights.sbomify.com/CVE-2006-2394/): Cross-site scripting in turnkey web tools:php live helper (medium 5.8)
- [CVE-2006-2393](https://insights.sbomify.com/CVE-2006-2393/): Memory corruption in empire server:empire server (medium 5.0)
- [CVE-2006-2392](https://insights.sbomify.com/CVE-2006-2392/): Code injection in blue dragon:php blue dragon (medium 6.4)
- [CVE-2006-2391](https://insights.sbomify.com/CVE-2006-2391/): Memory corruption in emc:retrospect client (high 7.5)
- [CVE-2006-2390](https://insights.sbomify.com/CVE-2006-2390/): Cross-site scripting in ozjournals:ozjournals (medium 5.8)
- [CVE-2006-2389](https://insights.sbomify.com/CVE-2006-2389/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2006-2388](https://insights.sbomify.com/CVE-2006-2388/): Memory corruption in microsoft:excel (critical 9.3)
- [CVE-2006-2387](https://insights.sbomify.com/CVE-2006-2387/): Memory corruption in microsoft:office (medium 5.1)
- [CVE-2006-2386](https://insights.sbomify.com/CVE-2006-2386/): Memory corruption in microsoft:outlook express (medium 6.8)
- [CVE-2006-2385](https://insights.sbomify.com/CVE-2006-2385/): Memory corruption in microsoft:ie (high 7.6)
- [CVE-2006-2384](https://insights.sbomify.com/CVE-2006-2384/): Security feature bypass in microsoft:internet explorer (medium 4.3)
- [CVE-2006-2383](https://insights.sbomify.com/CVE-2006-2383/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2006-2382](https://insights.sbomify.com/CVE-2006-2382/): Memory corruption in microsoft:internet explorer (critical 10.0)
- [CVE-2006-2380](https://insights.sbomify.com/CVE-2006-2380/): Auth bypass in microsoft:windows 2000 (medium 4.3)
- [CVE-2006-2379](https://insights.sbomify.com/CVE-2006-2379/): Memory corruption in microsoft:windows 2000 (critical 9.3)
- [CVE-2006-2378](https://insights.sbomify.com/CVE-2006-2378/): Memory corruption in microsoft:ie (medium 6.8)
- [CVE-2006-2376](https://insights.sbomify.com/CVE-2006-2376/): Integer overflow in microsoft:windows 98 (high 7.5)
- [CVE-2006-2374](https://insights.sbomify.com/CVE-2006-2374/): Denial of service in microsoft:windows 2000 (medium 5.5)
- [CVE-2006-2373](https://insights.sbomify.com/CVE-2006-2373/): Privilege escalation in microsoft:windows 2000 (critical 10.0)
- [CVE-2006-2372](https://insights.sbomify.com/CVE-2006-2372/): Memory corruption in microsoft:dhcp client service (critical 10.0)
- [CVE-2006-2371](https://insights.sbomify.com/CVE-2006-2371/): Memory corruption in microsoft:windows 2000 (high 7.5)
- [CVE-2006-2370](https://insights.sbomify.com/CVE-2006-2370/): Memory corruption in microsoft:windows 2000 (high 7.5)
- [CVE-2006-2369](https://insights.sbomify.com/CVE-2006-2369/): Auth bypass in vnc:realvnc (high 7.5)
- [CVE-2006-2368](https://insights.sbomify.com/CVE-2006-2368/): Cross-site scripting in clansys:clansys (medium 5.8)
- [CVE-2006-2367](https://insights.sbomify.com/CVE-2006-2367/): Cross-site scripting in clansys:clansys (medium 4.3)
- [CVE-2006-2366](https://insights.sbomify.com/CVE-2006-2366/): Other in openobex:openobex (low 2.6)
- [CVE-2006-2365](https://insights.sbomify.com/CVE-2006-2365/): Cross-site scripting in vizra:vizra (medium 5.8)
- [CVE-2006-2364](https://insights.sbomify.com/CVE-2006-2364/): Cross-site scripting in macromedia:coldfusion (medium 5.8)
- [CVE-2006-2363](https://insights.sbomify.com/CVE-2006-2363/): SQL injection in limbo cms:limbo cms (medium 5.1)
- [CVE-2006-2362](https://insights.sbomify.com/CVE-2006-2362/): Memory corruption in gnu:binutils (high 7.3)
- [CVE-2006-2361](https://insights.sbomify.com/CVE-2006-2361/): Code injection in mxbb:mxbb portal (high 7.5)
- [CVE-2006-2360](https://insights.sbomify.com/CVE-2006-2360/): SQL injection in phpbb group:phpbb (high 7.5)
- [CVE-2006-2359](https://insights.sbomify.com/CVE-2006-2359/): Cross-site scripting in phpbb group:phpbb (medium 4.3)
- [CVE-2006-2358](https://insights.sbomify.com/CVE-2006-2358/): Cross-site scripting in web-labs:web-labs cms (medium 4.3)
- [CVE-2006-2357](https://insights.sbomify.com/CVE-2006-2357/): Information disclosure in ipswitch:whatsup professional (medium 5.0)
- [CVE-2006-2356](https://insights.sbomify.com/CVE-2006-2356/): Information disclosure in ipswitch:whatsup professional (medium 5.0)
- [CVE-2006-2355](https://insights.sbomify.com/CVE-2006-2355/): Information disclosure in ipswitch:whatsup professional (medium 5.0)
- [CVE-2006-2354](https://insights.sbomify.com/CVE-2006-2354/): Information disclosure in ipswitch:whatsup professional (medium 5.0)
- [CVE-2006-2353](https://insights.sbomify.com/CVE-2006-2353/): Open redirect in ipswitch:whatsup professional (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/47/