# Vulnerabilities published in 2006


- [CVE-2006-2046](https://insights.sbomify.com/CVE-2006-2046/): SQL injection in application dynamics:cartweaver coldfusion (medium 6.4)
- [CVE-2006-2045](https://insights.sbomify.com/CVE-2006-2045/): Misconfiguration in ip3 networks:ip3 netaccess 75 (low 3.6)
- [CVE-2006-2044](https://insights.sbomify.com/CVE-2006-2044/): Hardcoded credentials in ip3 networks:ip3 netaccess 75 (high 7.5)
- [CVE-2006-2043](https://insights.sbomify.com/CVE-2006-2043/): Command injection in ip3 networks:ip3 netaccess 75 (medium 4.6)
- [CVE-2006-2042](https://insights.sbomify.com/CVE-2006-2042/): Code injection in adobe:dreamweaver (high 7.5)
- [CVE-2006-2041](https://insights.sbomify.com/CVE-2006-2041/): Missing authorization in phpwebgallery:phpwebgallery (medium 5.0)
- [CVE-2006-2040](https://insights.sbomify.com/CVE-2006-2040/): SQL injection in photokorn:photokorn (medium 6.4)
- [CVE-2006-2039](https://insights.sbomify.com/CVE-2006-2039/): SQL injection in ubertec:help center live (high 7.5)
- [CVE-2006-2038](https://insights.sbomify.com/CVE-2006-2038/): SQL injection in amplecom:ampleshop (high 7.5)
- [CVE-2006-2037](https://insights.sbomify.com/CVE-2006-2037/): Cross-site scripting in thwboard:thwboard (medium 4.3)
- [CVE-2006-2036](https://insights.sbomify.com/CVE-2006-2036/): Weak cryptography in iopus:secure email attachments (low 2.1)
- [CVE-2006-2035](https://insights.sbomify.com/CVE-2006-2035/): Security feature bypass in websense:websense (low 3.7)
- [CVE-2006-2034](https://insights.sbomify.com/CVE-2006-2034/): SQL injection in flexbb:flexbb (high 7.5)
- [CVE-2006-2033](https://insights.sbomify.com/CVE-2006-2033/): Code injection in corenews:corenews (medium 6.4)
- [CVE-2006-2032](https://insights.sbomify.com/CVE-2006-2032/): SQL injection in corenews:corenews (medium 6.4)
- [CVE-2006-2031](https://insights.sbomify.com/CVE-2006-2031/): Cross-site scripting in phpmyadmin:phpmyadmin (low 2.6)
- [CVE-2006-2030](https://insights.sbomify.com/CVE-2006-2030/): Denial of service in alliedtelesyn:at-9724ts (medium 5.0)
- [CVE-2006-2029](https://insights.sbomify.com/CVE-2006-2029/): SQL injection in simplog:simplog (medium 6.4)
- [CVE-2006-2028](https://insights.sbomify.com/CVE-2006-2028/): Cross-site scripting in simplog:simplog (medium 5.8)
- [CVE-2006-2027](https://insights.sbomify.com/CVE-2006-2027/): Memory corruption in pablo software solutions:quick n easy ftp server (medium 6.5)
- [CVE-2006-2026](https://insights.sbomify.com/CVE-2006-2026/): Memory corruption in libtiff:libtiff (medium 6.5)
- [CVE-2006-2025](https://insights.sbomify.com/CVE-2006-2025/): Integer overflow in libtiff:libtiff (medium 6.5)
- [CVE-2006-2024](https://insights.sbomify.com/CVE-2006-2024/): Denial of service in libtiff:libtiff (medium 4.0)
- [CVE-2006-2023](https://insights.sbomify.com/CVE-2006-2023/): Integer overflow in ls3:fenice (medium 5.0)
- [CVE-2006-2022](https://insights.sbomify.com/CVE-2006-2022/): Memory corruption in ls3:fenice (high 7.5)
- [CVE-2006-2021](https://insights.sbomify.com/CVE-2006-2021/): Path traversal in asteriskathome:asteriskathome (medium 5.0)
- [CVE-2006-2020](https://insights.sbomify.com/CVE-2006-2020/): Information disclosure in asteriskathome:asteriskathome (high 7.8)
- [CVE-2006-2019](https://insights.sbomify.com/CVE-2006-2019/): Denial of service in apple:safari (medium 5.0)
- [CVE-2006-2018](https://insights.sbomify.com/CVE-2006-2018/): SQL injection in jelsoft:vbulletin (high 7.5)
- [CVE-2006-2017](https://insights.sbomify.com/CVE-2006-2017/): Denial of service in dnsmasq:dnsmasq (medium 5.0)
- [CVE-2006-2016](https://insights.sbomify.com/CVE-2006-2016/): Cross-site scripting in debian:debian linux (low 2.6)
- [CVE-2006-2015](https://insights.sbomify.com/CVE-2006-2015/): Cross-site scripting in web-provence:sl site (low 2.6)
- [CVE-2006-2014](https://insights.sbomify.com/CVE-2006-2014/): Path traversal in web-provence:sl site (medium 5.0)
- [CVE-2006-2013](https://insights.sbomify.com/CVE-2006-2013/): SQL injection in web-provence:sl site (high 7.5)
- [CVE-2006-2012](https://insights.sbomify.com/CVE-2006-2012/): Memory corruption in skulltag team:skulltag (medium 5.0)
- [CVE-2006-2011](https://insights.sbomify.com/CVE-2006-2011/): Cross-site scripting in 4homepages:4images (low 2.6)
- [CVE-2006-2010](https://insights.sbomify.com/CVE-2006-2010/): SQL injection in paras chopra:bloggage (high 7.5)
- [CVE-2006-2009](https://insights.sbomify.com/CVE-2006-2009/): Code injection in phpmyagenda:phpmyagenda (high 7.5)
- [CVE-2006-2008](https://insights.sbomify.com/CVE-2006-2008/): Code injection in built2go:movie review (high 7.5)
- [CVE-2006-2007](https://insights.sbomify.com/CVE-2006-2007/): Memory corruption in winny:winny (high 7.5)
- [CVE-2006-2006](https://insights.sbomify.com/CVE-2006-2006/): Path traversal in ivan zahariev:izarc (medium 5.0)
- [CVE-2006-2005](https://insights.sbomify.com/CVE-2006-2005/): Code injection in clansys:clansys (high 7.5)
- [CVE-2006-2004](https://insights.sbomify.com/CVE-2006-2004/): SQL injection in michael romedahl:ri blog (high 7.5)
- [CVE-2006-2003](https://insights.sbomify.com/CVE-2006-2003/): Cross-site scripting in community architect:community architect guestbook (medium 4.3)
- [CVE-2006-2002](https://insights.sbomify.com/CVE-2006-2002/): Code injection in mygamingladder:mygamingladder (medium 5.0)
- [CVE-2006-2001](https://insights.sbomify.com/CVE-2006-2001/): Cross-site scripting in scry gallery:scry gallery (medium 4.3)
- [CVE-2006-20001](https://insights.sbomify.com/CVE-2006-20001/): Apache HTTP Server: mod_dav out of bounds read, or write of zero byte (high 7.5)
- [CVE-2006-2000](https://insights.sbomify.com/CVE-2006-2000/): Cross-site scripting in logmethods:logmethods (medium 4.3)
- [CVE-2006-1999](https://insights.sbomify.com/CVE-2006-1999/): Denial of service in openttd:openttd (medium 5.0)
- [CVE-2006-1998](https://insights.sbomify.com/CVE-2006-1998/): Denial of service in openttd:openttd (low 2.1)
- [CVE-2006-1997](https://insights.sbomify.com/CVE-2006-1997/): Information disclosure in sybase:pylon anywhere (low 2.1)
- [CVE-2006-1996](https://insights.sbomify.com/CVE-2006-1996/): Information disclosure in scry gallery:scry gallery (medium 5.0)
- [CVE-2006-1995](https://insights.sbomify.com/CVE-2006-1995/): Path traversal in scry gallery:scry gallery (medium 5.0)
- [CVE-2006-1994](https://insights.sbomify.com/CVE-2006-1994/): Code injection in dforum:dforum (high 7.5)
- [CVE-2006-1993](https://insights.sbomify.com/CVE-2006-1993/): Use after free in mozilla:firefox (medium 5.1)
- [CVE-2006-1992](https://insights.sbomify.com/CVE-2006-1992/): Null dereference in microsoft:internet explorer (low 2.6)
- [CVE-2006-1991](https://insights.sbomify.com/CVE-2006-1991/): Memory corruption in php:php (medium 6.4)
- [CVE-2006-1990](https://insights.sbomify.com/CVE-2006-1990/): Integer overflow in php:php (medium 5.0)
- [CVE-2006-1989](https://insights.sbomify.com/CVE-2006-1989/): Memory corruption in clam anti-virus:clamav (medium 5.1)
- [CVE-2006-1988](https://insights.sbomify.com/CVE-2006-1988/): Null dereference in apple:safari (medium 5.0)
- [CVE-2006-1987](https://insights.sbomify.com/CVE-2006-1987/): Memory corruption in apple:safari (high 7.5)
- [CVE-2006-1986](https://insights.sbomify.com/CVE-2006-1986/): Memory corruption in apple:safari (high 7.5)
- [CVE-2006-1985](https://insights.sbomify.com/CVE-2006-1985/): Memory corruption in apple:mac os x (medium 5.1)
- [CVE-2006-1984](https://insights.sbomify.com/CVE-2006-1984/): Null dereference in apple:mac os x (medium 5.0)
- [CVE-2006-1983](https://insights.sbomify.com/CVE-2006-1983/): Memory corruption in apple:mac os x (medium 6.4)
- [CVE-2006-1982](https://insights.sbomify.com/CVE-2006-1982/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2006-1981](https://insights.sbomify.com/CVE-2006-1981/): Information disclosure in apple:mac os x (low 2.1)
- [CVE-2006-1980](https://insights.sbomify.com/CVE-2006-1980/): Cross-site scripting in w2b:online banking (low 2.6)
- [CVE-2006-1979](https://insights.sbomify.com/CVE-2006-1979/): Cross-site scripting in manic web:mwguest (medium 5.8)
- [CVE-2006-1978](https://insights.sbomify.com/CVE-2006-1978/): SQL injection in flexbb:flexbb (high 7.5)
- [CVE-2006-1977](https://insights.sbomify.com/CVE-2006-1977/): Cross-site scripting in flexbb:flexbb (medium 5.8)
- [CVE-2006-1976](https://insights.sbomify.com/CVE-2006-1976/): Cross-site scripting in geekforgod.net:prayer request board (low 2.6)
- [CVE-2006-1975](https://insights.sbomify.com/CVE-2006-1975/): Cross-site scripting in stadtaus.com:php-gastebuch (low 2.6)
- [CVE-2006-1974](https://insights.sbomify.com/CVE-2006-1974/): SQL injection in mybulletinboard:mybulletinboard (high 7.5)
- [CVE-2006-1973](https://insights.sbomify.com/CVE-2006-1973/): Denial of service in linksys:rt31p2 (medium 5.0)
- [CVE-2006-1972](https://insights.sbomify.com/CVE-2006-1972/): Cross-site scripting in wingnut:easygallery (medium 4.3)
- [CVE-2006-1971](https://insights.sbomify.com/CVE-2006-1971/): Cross-site scripting in krankikom:contentboxx (medium 4.3)
- [CVE-2006-1970](https://insights.sbomify.com/CVE-2006-1970/): Cross-site scripting in kcscripts:portal pack (medium 4.3)
- [CVE-2006-1969](https://insights.sbomify.com/CVE-2006-1969/): Cross-site scripting in kcscripts:portal pack (low 2.6)
- [CVE-2006-1968](https://insights.sbomify.com/CVE-2006-1968/): Cross-site scripting in kcscripts:kcscripts news publisher (medium 5.8)
- [CVE-2006-1967](https://insights.sbomify.com/CVE-2006-1967/): Cross-site scripting in kcscripts:kcscripts calendar (low 2.6)
- [CVE-2006-1966](https://insights.sbomify.com/CVE-2006-1966/): Denial of service in fortinet:fortinet28 (medium 5.0)
- [CVE-2006-1965](https://insights.sbomify.com/CVE-2006-1965/): Cross-site scripting in aasi media:net clubs pro (medium 5.8)
- [CVE-2006-1964](https://insights.sbomify.com/CVE-2006-1964/): SQL injection in aspsitem:aspsitem (high 7.5)
- [CVE-2006-1963](https://insights.sbomify.com/CVE-2006-1963/): Path traversal in pcpin:pcpin chat (medium 5.5)
- [CVE-2006-1962](https://insights.sbomify.com/CVE-2006-1962/): SQL injection in pcpin:pcpin chat (high 7.5)
- [CVE-2006-1961](https://insights.sbomify.com/CVE-2006-1961/): Command injection in cisco:ciscoworks 2000 service management solution (high 7.5)
- [CVE-2006-1960](https://insights.sbomify.com/CVE-2006-1960/): Cross-site scripting in cisco:wireless lan solution engine (medium 5.8)
- [CVE-2006-1959](https://insights.sbomify.com/CVE-2006-1959/): Code injection in actualscripts:actualanalyzer (high 7.5)
- [CVE-2006-1958](https://insights.sbomify.com/CVE-2006-1958/): SQL injection in wired community software:wwwthreads (medium 6.4)
- [CVE-2006-1957](https://insights.sbomify.com/CVE-2006-1957/): Denial of service in joomla:joomla\! (medium 5.0)
- [CVE-2006-1956](https://insights.sbomify.com/CVE-2006-1956/): Information disclosure in joomla:joomla (medium 5.0)
- [CVE-2006-1955](https://insights.sbomify.com/CVE-2006-1955/): Code injection in nfec.de:rechnungszentrale (medium 5.0)
- [CVE-2006-1954](https://insights.sbomify.com/CVE-2006-1954/): SQL injection in nfec.de:rechnungszentrale (medium 5.0)
- [CVE-2006-1953](https://insights.sbomify.com/CVE-2006-1953/): Path traversal in caucho technology:resin (high 7.8)
- [CVE-2006-1952](https://insights.sbomify.com/CVE-2006-1952/): Path traversal in winagents:tftp server (medium 5.0)
- [CVE-2006-1951](https://insights.sbomify.com/CVE-2006-1951/): Path traversal in solarwinds:tftp server (medium 5.0)
- [CVE-2006-1950](https://insights.sbomify.com/CVE-2006-1950/): Cross-site scripting in perlcoders group:bannerfarm (medium 4.3)
- [CVE-2006-1949](https://insights.sbomify.com/CVE-2006-1949/): SQL injection in nicplex:plexcart (high 7.5)
- [CVE-2006-1948](https://insights.sbomify.com/CVE-2006-1948/): Business logic in ibm:lotus notes (medium 4.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2006/page/51/