# Vulnerabilities published in 2006 - [CVE-2006-0305](https://insights.sbomify.com/CVE-2006-0305/): Auth bypass in clipcomm:cp-100e voip wifi phone (high 7.5) - [CVE-2006-0304](https://insights.sbomify.com/CVE-2006-0304/): Memory corruption in achal dhir:dual dhcp dns server (high 7.5) - [CVE-2006-0303](https://insights.sbomify.com/CVE-2006-0303/): Other in joomla:joomla (critical 10.0) - [CVE-2006-0302](https://insights.sbomify.com/CVE-2006-0302/): Information disclosure in zyxel:p2000w version 2 voip wifi phone (medium 5.0) - [CVE-2006-0301](https://insights.sbomify.com/CVE-2006-0301/): Memory corruption in xpdf:xpdf (high 7.5) - [CVE-2006-0300](https://insights.sbomify.com/CVE-2006-0300/): Memory corruption in gnu:tar (medium 5.1) - [CVE-2006-0299](https://insights.sbomify.com/CVE-2006-0299/): Security feature bypass in mozilla:firefox (medium 6.4) - [CVE-2006-0298](https://insights.sbomify.com/CVE-2006-0298/): Memory corruption in mozilla:firefox (medium 5.8) - [CVE-2006-0297](https://insights.sbomify.com/CVE-2006-0297/): Integer overflow in mozilla:firefox (medium 5.1) - [CVE-2006-0296](https://insights.sbomify.com/CVE-2006-0296/): Cross-site scripting in mozilla:firefox (medium 5.0) - [CVE-2006-0295](https://insights.sbomify.com/CVE-2006-0295/): Memory corruption in mozilla:firefox (medium 5.1) - [CVE-2006-0294](https://insights.sbomify.com/CVE-2006-0294/): Use after free in mozilla:firefox (high 7.5) - [CVE-2006-0293](https://insights.sbomify.com/CVE-2006-0293/): Use after free in mozilla:firefox (high 7.5) - [CVE-2006-0292](https://insights.sbomify.com/CVE-2006-0292/): Memory corruption in mozilla:firefox (high 7.5) - [CVE-2006-0291](https://insights.sbomify.com/CVE-2006-0291/): Other in oracle:application server (critical 10.0) - [CVE-2006-0290](https://insights.sbomify.com/CVE-2006-0290/): Other in oracle:application server (critical 10.0) - [CVE-2006-0289](https://insights.sbomify.com/CVE-2006-0289/): Path traversal in oracle:application server (critical 10.0) - [CVE-2006-0288](https://insights.sbomify.com/CVE-2006-0288/): Other in oracle:application server (critical 10.0) - [CVE-2006-0287](https://insights.sbomify.com/CVE-2006-0287/): Other in oracle:application server (critical 10.0) - [CVE-2006-0286](https://insights.sbomify.com/CVE-2006-0286/): Other in oracle:application server (critical 10.0) - [CVE-2006-0285](https://insights.sbomify.com/CVE-2006-0285/): Other in oracle:application server (critical 10.0) - [CVE-2006-0284](https://insights.sbomify.com/CVE-2006-0284/): Other in oracle:application server (critical 10.0) - [CVE-2006-0283](https://insights.sbomify.com/CVE-2006-0283/): Other in oracle:application server (critical 10.0) - [CVE-2006-0282](https://insights.sbomify.com/CVE-2006-0282/): Other in oracle:application server (critical 10.0) - [CVE-2006-0281](https://insights.sbomify.com/CVE-2006-0281/): Other in oracle:enterpriseone (critical 10.0) - [CVE-2006-0280](https://insights.sbomify.com/CVE-2006-0280/): Other in oracle:peoplesoft enterprise portal (critical 10.0) - [CVE-2006-0279](https://insights.sbomify.com/CVE-2006-0279/): Other in oracle:e-business suite (critical 10.0) - [CVE-2006-0278](https://insights.sbomify.com/CVE-2006-0278/): Other in oracle:e-business suite (critical 10.0) - [CVE-2006-0277](https://insights.sbomify.com/CVE-2006-0277/): Other in oracle:e-business suite (critical 10.0) - [CVE-2006-0276](https://insights.sbomify.com/CVE-2006-0276/): Other in oracle:collaboration suite (critical 10.0) - [CVE-2006-0275](https://insights.sbomify.com/CVE-2006-0275/): Path traversal in oracle:application server (medium 5.0) - [CVE-2006-0274](https://insights.sbomify.com/CVE-2006-0274/): Other in oracle:application server (critical 10.0) - [CVE-2006-0273](https://insights.sbomify.com/CVE-2006-0273/): Other in oracle:application server (critical 10.0) - [CVE-2006-0272](https://insights.sbomify.com/CVE-2006-0272/): Memory corruption in oracle:oracle10g (critical 9.0) - [CVE-2006-0271](https://insights.sbomify.com/CVE-2006-0271/): SQL injection in oracle:database server (critical 10.0) - [CVE-2006-0270](https://insights.sbomify.com/CVE-2006-0270/): Weak cryptography in oracle:database server (critical 10.0) - [CVE-2006-0269](https://insights.sbomify.com/CVE-2006-0269/): SQL injection in oracle:oracle10g (medium 5.5) - [CVE-2006-0268](https://insights.sbomify.com/CVE-2006-0268/): Other in oracle:database server (critical 9.0) - [CVE-2006-0267](https://insights.sbomify.com/CVE-2006-0267/): Other in oracle:database server (critical 9.0) - [CVE-2006-0266](https://insights.sbomify.com/CVE-2006-0266/): Other in oracle:database server (critical 9.0) - [CVE-2006-0265](https://insights.sbomify.com/CVE-2006-0265/): SQL injection in oracle:database server (critical 10.0) - [CVE-2006-0263](https://insights.sbomify.com/CVE-2006-0263/): Other in oracle:database server (critical 10.0) - [CVE-2006-0262](https://insights.sbomify.com/CVE-2006-0262/): Other in oracle:database server (critical 10.0) - [CVE-2006-0261](https://insights.sbomify.com/CVE-2006-0261/): Information disclosure in oracle:database server (critical 10.0) - [CVE-2006-0260](https://insights.sbomify.com/CVE-2006-0260/): SQL injection in oracle:database server (critical 10.0) - [CVE-2006-0259](https://insights.sbomify.com/CVE-2006-0259/): SQL injection in oracle:database server (critical 10.0) - [CVE-2006-0258](https://insights.sbomify.com/CVE-2006-0258/): Other in oracle:database server (critical 10.0) - [CVE-2006-0257](https://insights.sbomify.com/CVE-2006-0257/): SQL injection in oracle:database server (critical 10.0) - [CVE-2006-0256](https://insights.sbomify.com/CVE-2006-0256/): Other in oracle:database server (critical 10.0) - [CVE-2006-0255](https://insights.sbomify.com/CVE-2006-0255/): Privilege escalation in checkpoint:vpn-1 (high 7.2) - [CVE-2006-0254](https://insights.sbomify.com/CVE-2006-0254/): Apache Geronimo console 1.0 vulnerable to cross-site scripting (medium 4.3) - [CVE-2006-0253](https://insights.sbomify.com/CVE-2006-0253/): Memory corruption in ambicom:blue neighbors (medium 5.1) - [CVE-2006-0252](https://insights.sbomify.com/CVE-2006-0252/): SQL injection in benders calendar:benders calendar (high 7.5) - [CVE-2006-0251](https://insights.sbomify.com/CVE-2006-0251/): Cross-site scripting in faq-o-matic:faq-o-matic (medium 4.3) - [CVE-2006-0250](https://insights.sbomify.com/CVE-2006-0250/): Memory corruption in carnegie mellon university:snmptrapd (medium 6.4) - [CVE-2006-0249](https://insights.sbomify.com/CVE-2006-0249/): SQL injection in bitdamaged:geoblog (high 7.5) - [CVE-2006-0248](https://insights.sbomify.com/CVE-2006-0248/): Missing authorization in intracom:jetspeed (medium 5.0) - [CVE-2006-0247](https://insights.sbomify.com/CVE-2006-0247/): Cross-site scripting in netbula:anyboard (medium 4.3) - [CVE-2006-0246](https://insights.sbomify.com/CVE-2006-0246/): Cross-site scripting in widexl:download tracker (medium 4.3) - [CVE-2006-0245](https://insights.sbomify.com/CVE-2006-0245/): Cross-site scripting in devellion:cubecart (medium 4.3) - [CVE-2006-0244](https://insights.sbomify.com/CVE-2006-0244/): Path traversal in phpxplorer:phpxplorer (medium 5.0) - [CVE-2006-0243](https://insights.sbomify.com/CVE-2006-0243/): Cross-site scripting in smbcms:smbcms (medium 4.3) - [CVE-2006-0242](https://insights.sbomify.com/CVE-2006-0242/): Cross-site scripting in php fusebox:php fusebox (medium 6.4) - [CVE-2006-0241](https://insights.sbomify.com/CVE-2006-0241/): Cross-site scripting in webmobo:wbnews (medium 5.0) - [CVE-2006-0240](https://insights.sbomify.com/CVE-2006-0240/): SQL injection in 8pixel.net:simple blog (high 7.5) - [CVE-2006-0239](https://insights.sbomify.com/CVE-2006-0239/): Cross-site scripting in 8pixel.net:simple blog (medium 5.8) - [CVE-2006-0238](https://insights.sbomify.com/CVE-2006-0238/): SQL injection in gamerz:wp-stats (high 7.5) - [CVE-2006-0237](https://insights.sbomify.com/CVE-2006-0237/): Cross-site scripting in gtp:icommerce (medium 4.3) - [CVE-2006-0236](https://insights.sbomify.com/CVE-2006-0236/): Security feature bypass in mozilla:thunderbird (medium 5.1) - [CVE-2006-0235](https://insights.sbomify.com/CVE-2006-0235/): SQL injection in white angle:white album (high 7.5) - [CVE-2006-0234](https://insights.sbomify.com/CVE-2006-0234/): SQL injection in microblog:microblog (high 7.5) - [CVE-2006-0233](https://insights.sbomify.com/CVE-2006-0233/): Cross-site scripting in microblog:microblog (medium 4.3) - [CVE-2006-0232](https://insights.sbomify.com/CVE-2006-0232/): Information disclosure in symantec:antivirus scan engine (medium 5.0) - [CVE-2006-0231](https://insights.sbomify.com/CVE-2006-0231/): Hardcoded credentials in symantec:antivirus scan engine (medium 6.4) - [CVE-2006-0230](https://insights.sbomify.com/CVE-2006-0230/): Auth bypass in symantec:antivirus scan engine (critical 10.0) - [CVE-2006-0229](https://insights.sbomify.com/CVE-2006-0229/): Privilege escalation in wehnus:wehntrust (low 2.1) - [CVE-2006-0228](https://insights.sbomify.com/CVE-2006-0228/): Privilege escalation in grsecurity:grsecurity kernel patch (high 7.2) - [CVE-2006-0227](https://insights.sbomify.com/CVE-2006-0227/): Other in sun:solaris (low 2.6) - [CVE-2006-0226](https://insights.sbomify.com/CVE-2006-0226/): Integer overflow in freebsd:freebsd (critical 10.0) - [CVE-2006-0225](https://insights.sbomify.com/CVE-2006-0225/): Command injection in openbsd:openssh (medium 4.6) - [CVE-2006-0224](https://insights.sbomify.com/CVE-2006-0224/): Memory corruption in libast:libast (medium 4.6) - [CVE-2006-0223](https://insights.sbomify.com/CVE-2006-0223/): Path traversal in topcmm computing:123 flash chat server (medium 5.0) - [CVE-2006-0222](https://insights.sbomify.com/CVE-2006-0222/): Cross-site scripting in alstrasoft:template seller (medium 4.3) - [CVE-2006-0221](https://insights.sbomify.com/CVE-2006-0221/): SQL injection in ddsn:cm3cms (high 7.5) - [CVE-2006-0220](https://insights.sbomify.com/CVE-2006-0220/): Cross-site scripting in codeworx technologies:dcp-portal (medium 4.3) - [CVE-2006-0219](https://insights.sbomify.com/CVE-2006-0219/): Supply chain in mybulletinboard:mybulletinboard (high 7.5) - [CVE-2006-0218](https://insights.sbomify.com/CVE-2006-0218/): Other in mybb:mybb (critical 10.0) - [CVE-2006-0217](https://insights.sbomify.com/CVE-2006-0217/): Cross-site scripting in ultimate auction:ultimate auction (medium 4.3) - [CVE-2006-0216](https://insights.sbomify.com/CVE-2006-0216/): Information disclosure in qualityebiz:quality ppc (medium 5.0) - [CVE-2006-0215](https://insights.sbomify.com/CVE-2006-0215/): Cross-site scripting in qualityebiz:quality ppc (medium 4.3) - [CVE-2006-0214](https://insights.sbomify.com/CVE-2006-0214/): Code injection in indexcor:ezdatabase (high 7.5) - [CVE-2006-0213](https://insights.sbomify.com/CVE-2006-0213/): Information disclosure in kolab:kolab groupware server (medium 4.6) - [CVE-2006-0212](https://insights.sbomify.com/CVE-2006-0212/): Path traversal in toshiba:bluetooth stack (medium 5.0) - [CVE-2006-0211](https://insights.sbomify.com/CVE-2006-0211/): Cross-site scripting in helm hosting:helm hosting control panel (medium 4.3) - [CVE-2006-0210](https://insights.sbomify.com/CVE-2006-0210/): Cross-site scripting in interspire:trackpoint nx (medium 4.3) - [CVE-2006-0209](https://insights.sbomify.com/CVE-2006-0209/): SQL injection in tanklogger:tanklogger (high 7.5) - [CVE-2006-0208](https://insights.sbomify.com/CVE-2006-0208/): Cross-site scripting in php:php (low 2.6) - [CVE-2006-0207](https://insights.sbomify.com/CVE-2006-0207/): Other in php:php (medium 5.0) - [CVE-2006-0206](https://insights.sbomify.com/CVE-2006-0206/): Code injection in light weight calendar:light weight calendar (high 7.5) - [CVE-2006-0205](https://insights.sbomify.com/CVE-2006-0205/): SQL injection in wordcircle:wordcircle (medium 5.1) --- From sbomify Insights: https://insights.sbomify.com/years/2006/page/68/