Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2006

31 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-0988
    49Plan

    The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows

    HighCVSS 7.8WeaponizedEPSS 59%

    microsoft · windows 2000Mar 3, 2006

  • CVE-2006-0987
    37Monitor

    The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides addit

    MediumCVSS 5.0WeaponizedEPSS 58%

    isc · bindMar 3, 2006

  • CVE-2006-0814
    23Monitor

    response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via

    MediumCVSS 5.0No exploitEPSS 10%

    lighttpd · lighttpdMar 6, 2006

  • CVE-2006-1010
    30Monitor

    Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of s

    MediumCVSS 6.4Proof of conceptEPSS 17%

    crossfire · crossfireMar 6, 2006

  • CVE-2006-1015
    29Monitor

    Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for

    MediumCVSS 6.4Proof of conceptEPSS 12%

    php · phpMar 6, 2006

  • CVE-2006-1016
    50Plan

    Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1,

    HighCVSS 7.5WeaponizedEPSS 66%

    microsoft · internet explorerMar 6, 2006

  • CVE-2006-1043
    27Monitor

    Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attackers to execute arbit

    MediumCVSS 5.1Proof of conceptEPSS 22%

    microsoft · visual interdevMar 7, 2006

  • CVE-2006-1148
    52Plan

    Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to exe

    HighCVSS 7.5WeaponizedEPSS 73%

    peercast · peercastMar 10, 2006

  • CVE-2006-1206
    24Monitor

    Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remot

    MediumCVSS 5.0Proof of conceptEPSS 11%

    dropbear ssh project · dropbear sshMar 13, 2006

  • CVE-2006-0396
    23Monitor

    Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute

    MediumCVSS 5.1Proof of conceptEPSS 11%

    apple · mac os xMar 14, 2006

  • CVE-2006-0009
    24Monitor

    Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary c

    MediumCVSS 5.1No exploitEPSS 14%

    microsoft · officeMar 14, 2006

  • CVE-2006-0028
    25Monitor

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    MediumCVSS 5.1No exploitEPSS 16%

    microsoft · excelMar 14, 2006

  • CVE-2006-0029
    24Monitor

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    MediumCVSS 5.1No exploitEPSS 14%

    microsoft · excelMar 14, 2006

  • CVE-2006-0030
    32Monitor

    Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted att

    MediumCVSS 5.1Proof of conceptEPSS 39%

    microsoft · excelMar 14, 2006

  • CVE-2006-0031
    25Monitor

    Stack-based buffer overflow in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, allows user-assisted a

    MediumCVSS 5.1No exploitEPSS 18%

    microsoft · officeMar 14, 2006

  • CVE-2006-1236
    38Monitor

    Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long se

    HighCVSS 7.5Proof of conceptEPSS 27%

    crossfire · crossfireMar 14, 2006

  • CVE-2006-1245
    49Plan

    Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute

    HighCVSS 7.5Proof of conceptEPSS 61%

    microsoft · ieMar 16, 2006

  • CVE-2006-1255
    61This week

    Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service

    CriticalCVSS 10.0WeaponizedEPSS 68%

    mercur · mercur messagingMar 18, 2006

  • CVE-2006-1257
    39Monitor

    The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by

    HighCVSS 7.5No exploitEPSS 30%

    microsoft · commerce serverMar 18, 2006

  • CVE-2006-1260
    24Monitor

    Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.p

    MediumCVSS 5.0Proof of conceptEPSS 12%

    horde · hordeMar 18, 2006

  • CVE-2006-0058
    39Monitor

    Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a

    HighCVSS 7.6Proof of conceptEPSS 28%

    sendmail · sendmailMar 22, 2006

  • CVE-2006-1359
    58Plan

    Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ce

    CriticalCVSS 9.3WeaponizedEPSS 68%

    microsoft · ieMar 22, 2006

  • CVE-2006-1364
    48Plan

    Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET,

    HighCVSS 7.5Proof of conceptEPSS 58%

    microsoft · asp.netMar 23, 2006

  • CVE-2006-0323
    42Plan

    Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and H

    CriticalCVSS 9.3Proof of conceptEPSS 16%

    realnetworks · helix playerMar 23, 2006

  • CVE-2006-1388
    47Plan

    Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.

    HighCVSS 7.5Proof of conceptEPSS 55%

    microsoft · ieMar 24, 2006

  • CVE-2006-0991
    31Monitor

    Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to exe

    HighCVSS 7.1No exploitEPSS 11%

    veritas · netbackupMar 27, 2006

  • CVE-2006-1490
    26Monitor

    PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user

    MediumCVSS 5.0Proof of conceptEPSS 20%

    php · phpMar 29, 2006

  • CVE-2006-1491
    42Plan

    Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execu

    HighCVSS 7.5Proof of conceptEPSS 39%

    horde · application frameworkMar 29, 2006

  • CVE-2006-1510
    20Monitor

    Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft

    MediumCVSS 4.0Proof of conceptEPSS 13%

    microsoft · .net frameworkMar 29, 2006

  • CVE-2006-1540
    46Plan

    MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute

    CriticalCVSS 9.3Proof of conceptEPSS 28%

    microsoft · officeMar 30, 2006

  • CVE-2006-1547
    76This week

    ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service v

    HighCVSS 7.5KEVWeaponizedEPSS 54%

    apache · strutsMar 30, 2006