Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2006

19 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-0528
    23Monitor

    The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (

    MediumCVSS 5.0Proof of conceptEPSS 11%

    gnome · evolutionFeb 2, 2006

  • CVE-2006-0295
    41Plan

    Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbi

    MediumCVSS 5.1WeaponizedEPSS 71%

    mozilla · firefoxFeb 2, 2006

  • CVE-2006-0537
    42Plan

    Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code vi

    HighCVSS 7.5Proof of conceptEPSS 41%

    kinesphere corporation · exchange pop3Feb 3, 2006

  • CVE-2006-0544
    37Monitor

    urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application cras

    HighCVSS 7.5Proof of conceptEPSS 21%

    microsoft · ieFeb 3, 2006

  • CVE-2006-0564
    52Plan

    Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTM

    HighCVSS 7.5WeaponizedEPSS 71%

    microsoft · html helpFeb 6, 2006

  • CVE-2006-0585
    25Monitor

    jscript.dll in Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (application crash) via

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · internet explorerFeb 7, 2006

  • CVE-2006-0005
    49Plan

    Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set

    CriticalCVSS 9.3Proof of conceptEPSS 38%

    microsoft · windows-ntFeb 14, 2006

  • CVE-2006-0013
    36Monitor

    Buffer overflow in the Web Client service (WebClnt.dll) for Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote authe

    MediumCVSS 6.5No exploitEPSS 34%

    microsoft · windows 2003 serverFeb 14, 2006

  • CVE-2006-0021
    50Plan

    Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet

    HighCVSS 7.8Proof of conceptEPSS 62%

    microsoft · windows 2003 serverFeb 14, 2006

  • CVE-2006-0004
    29Monitor

    Microsoft PowerPoint 2000 in Office 2000 SP3 has an interaction with Internet Explorer that allows remote attackers to obtain sensitive info

    MediumCVSS 5.0No exploitEPSS 31%

    microsoft · officeFeb 14, 2006

  • CVE-2006-0006
    52Plan

    Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Win

    CriticalCVSS 9.3Proof of conceptEPSS 49%

    microsoft · windows media playerFeb 14, 2006

  • CVE-2006-0705
    29Monitor

    Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX

    MediumCVSS 6.5No exploitEPSS 10%

    attachmatewrq · reflection for secure it serverFeb 15, 2006

  • CVE-2006-0460
    51Plan

    Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages.

    HighCVSS 7.5WeaponizedEPSS 68%

    bomberclone · bombercloneFeb 16, 2006

  • CVE-2006-0753
    14Monitor

    Memory leak in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to cause a denial of service (memory cons

    LowCVSS 2.6No exploitEPSS 11%

    microsoft · ieFeb 17, 2006

  • CVE-2006-0830
    34Monitor

    The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute a

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · internet explorerFeb 21, 2006

  • CVE-2006-0848
    37Monitor

    The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary comm

    MediumCVSS 5.1WeaponizedEPSS 58%

    apple · mac os xFeb 22, 2006

  • CVE-2006-0720
    33Monitor

    Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibl

    HighCVSS 7.6Proof of conceptEPSS 10%

    nullsoft · winampFeb 23, 2006

  • CVE-2006-0900
    51Plan

    nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the Prot

    HighCVSS 7.8WeaponizedEPSS 65%

    freebsd · freebsdFeb 27, 2006

  • CVE-2006-0911
    25Monitor

    NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted reque

    MediumCVSS 5.0Proof of conceptEPSS 16%

    ipswitch · whatsupFeb 28, 2006