Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: January 2006

23 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-0097
    34Monitor

    Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attacker

    HighCVSS 7.5Proof of conceptEPSS 12%

    php · phpJan 6, 2006

  • CVE-2006-0143
    39Monitor

    Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF

    HighCVSS 7.5Proof of conceptEPSS 31%

    microsoft · windows 2000Jan 9, 2006

  • CVE-2006-0146
    34Monitor

    The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Ca

    HighCVSS 7.5Proof of conceptEPSS 13%

    mantis · mantisJan 9, 2006

  • CVE-2006-0147
    34Monitor

    Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (

    HighCVSS 7.5Proof of conceptEPSS 13%

    john lim · adodbJan 9, 2006

  • CVE-2006-0162
    33Monitor

    Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (c

    HighCVSS 7.5No exploitEPSS 10%

    clam anti-virus · clamavJan 10, 2006

  • CVE-2006-0020
    43Plan

    An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millenni

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · windows 2000Jan 10, 2006

  • CVE-2006-0002
    44Plan

    Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows

    HighCVSS 7.5No exploitEPSS 45%

    microsoft · exchange serverJan 10, 2006

  • CVE-2006-0010
    47Plan

    Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows

    CriticalCVSS 9.3No exploitEPSS 33%

    microsoft · windows 2000Jan 10, 2006

  • CVE-2006-0179
    24Monitor

    The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to a

    MediumCVSS 5.0Proof of conceptEPSS 13%

    cisco · ip phone 7940Jan 11, 2006

  • CVE-2006-0187
    26Monitor

    By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function)

    MediumCVSS 5.1Proof of conceptEPSS 19%

    microsoft · visual studio .netJan 12, 2006

  • CVE-2006-0189
    35Monitor

    Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a

    HighCVSS 7.5Proof of conceptEPSS 15%

    estara · softphoneJan 13, 2006

  • CVE-2006-0200
    43Plan

    Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to ex

    CriticalCVSS 9.3No exploitEPSS 19%

    php · phpJan 13, 2006

  • CVE-2006-0254
    27Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 4.3Proof of conceptEPSS 32%

    apache · geronimoJan 17, 2006

  • CVE-2006-0287
    49Plan

    Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspe

    CriticalCVSS 10.0Proof of conceptEPSS 29%

    oracle · application serverJan 18, 2006

  • CVE-2006-0289
    44Plan

    Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecif

    CriticalCVSS 10.0No exploitEPSS 12%

    oracle · application serverJan 18, 2006

  • CVE-2006-0306
    24Monitor

    The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARC

    MediumCVSS 5.0Proof of conceptEPSS 12%

    ca · unicenter remote controlJan 18, 2006

  • CVE-2006-0316
    43Plan

    Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and

    CriticalCVSS 10.0No exploitEPSS 10%

    aol · aol client softwareJan 18, 2006

  • CVE-2006-0354
    25Monitor

    Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (terminat

    MediumCVSS 5.5Proof of conceptEPSS 10%

    cisco · aironet ap1100Jan 22, 2006

  • CVE-2006-0376
    35Monitor

    The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user w

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · windows 2000Jan 22, 2006

  • CVE-2006-0441
    51Plan

    Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which trigge

    HighCVSS 7.5WeaponizedEPSS 71%

    karjasoft · sami ftp serverJan 26, 2006

  • CVE-2006-0057
    36Monitor

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous ActiveX controls via unkn

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · ieJan 27, 2006

  • CVE-2006-0468
    33Monitor

    CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code vi

    HighCVSS 7.5Proof of conceptEPSS 10%

    stalker · communigate proJan 30, 2006

  • CVE-2006-0476
    52Plan

    Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (F

    HighCVSS 7.6WeaponizedEPSS 74%

    nullsoft · winampJan 31, 2006