Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2006

45 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2006-4534
    47Plan

    Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via

    CriticalCVSS 9.3No exploitEPSS 34%

    microsoft · officeSep 5, 2006

  • CVE-2006-4095
    34Monitor

    BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which c

    HighCVSS 7.5No exploitEPSS 11%

    isc · bindSep 5, 2006

  • CVE-2006-4560
    36Monitor

    Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with a

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · ieSep 5, 2006

  • CVE-2006-4602
    43Plan

    Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP cod

    HighCVSS 7.5WeaponizedEPSS 44%

    tiki · tikiwiki cms\/groupwareSep 6, 2006

  • CVE-2006-4627
    24Monitor

    System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of

    MediumCVSS 5.0No exploitEPSS 14%

    microsoft · system information activex controlSep 7, 2006

  • CVE-2006-4379
    48Plan

    Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IM

    HighCVSS 7.5Proof of conceptEPSS 60%

    ipswitch · imail plusSep 8, 2006

  • CVE-2006-4656
    33Monitor

    PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attack

    HighCVSS 7.5Proof of conceptEPSS 11%

    web-provence · sl siteSep 8, 2006

  • CVE-2006-4670
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP cod

    HighCVSS 7.5Proof of conceptEPSS 10%

    gtasoft · photokorn gallerySep 8, 2006

  • CVE-2006-0001
    50Plan

    Stack-based buffer overflow in Microsoft Publisher 2000 through 2003 allows user-assisted remote attackers to execute arbitrary code via a c

    CriticalCVSS 9.3No exploitEPSS 41%

    microsoft · officeSep 12, 2006

  • CVE-2006-0032
    24Monitor

    Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is

    MediumCVSS 4.3Proof of conceptEPSS 24%

    microsoft · windows 2000Sep 12, 2006

  • CVE-2006-3311
    25Monitor

    Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote at

    MediumCVSS 5.1No exploitEPSS 17%

    adobe · flash playerSep 12, 2006

  • CVE-2006-3442
    38Monitor

    Unspecified vulnerability in Pragmatic General Multicast (PGM) in Microsoft Windows XP SP2 and earlier allows remote attackers to execute ar

    HighCVSS 7.6No exploitEPSS 27%

    microsoft · windows xpSep 12, 2006

  • CVE-2006-3873
    39Monitor

    Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b

    HighCVSS 7.5No exploitEPSS 29%

    microsoft · ieSep 12, 2006

  • CVE-2006-4384
    25Monitor

    Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64

    MediumCVSS 5.1Proof of conceptEPSS 16%

    apple · quicktimeSep 12, 2006

  • CVE-2006-4640
    30Monitor

    Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protec

    MediumCVSS 6.8No exploitEPSS 10%

    adobe · flash playerSep 12, 2006

  • CVE-2006-4777
    54Plan

    Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer

    HighCVSS 7.6WeaponizedEPSS 79%

    microsoft · ieSep 13, 2006

  • CVE-2006-4832
    33Monitor

    Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and S

    HighCVSS 7.5Proof of conceptEPSS 11%

    verso netperformer · frame relay access device actSep 15, 2006

  • CVE-2006-4844
    23Monitor

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other

    MediumCVSS 5.1Proof of conceptEPSS 10%

    claroline · clarolineSep 18, 2006

  • CVE-2006-4847
    52Plan

    Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long

    MediumCVSS 6.5WeaponizedEPSS 85%

    ipswitch · ws ftp serverSep 18, 2006

  • CVE-2006-4868
    55Plan

    Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Win

    CriticalCVSS 9.3WeaponizedEPSS 61%

    microsoft · windows 2000Sep 19, 2006

  • CVE-2006-4870
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitra

    HighCVSS 7.5Proof of conceptEPSS 10%

    aewebworks · aedatingSep 19, 2006

  • CVE-2006-4888
    25Monitor

    Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML I

    MediumCVSS 5.0No exploitEPSS 17%

    microsoft · ieSep 19, 2006

  • CVE-2006-4889
    25Monitor

    Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, al

    MediumCVSS 5.1Proof of conceptEPSS 16%

    telekorn · signkorn guestbookSep 19, 2006

  • CVE-2006-4438
    28Monitor

    Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute ar

    MediumCVSS 6.4Proof of conceptEPSS 10%

    doctor web ltd · dr.webSep 20, 2006

  • CVE-2006-4920
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP c

    HighCVSS 7.5Proof of conceptEPSS 11%

    siteatschool · siteatschoolSep 20, 2006

  • CVE-2006-4899
    23Monitor

    The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows

    MediumCVSS 5.0Proof of conceptEPSS 10%

    broadcom · etrust security command centerSep 22, 2006

  • CVE-2006-4901
    28Monitor

    Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to sp

    MediumCVSS 6.4Proof of conceptEPSS 10%

    broadcom · etrust audit clientSep 22, 2006

  • CVE-2006-4948
    46Plan

    Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary c

    HighCVSS 7.5WeaponizedEPSS 54%

    prosysinfo · tftp server tftpdwinSep 22, 2006

  • CVE-2006-4965
    24Monitor

    Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via

    MediumCVSS 5.0Proof of conceptEPSS 13%

    apple · quicktimeSep 24, 2006

  • CVE-2006-4969
    34Monitor

    Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via

    HighCVSS 7.5Proof of conceptEPSS 12%

    wahm e-commerce · pie cart proSep 24, 2006

  • CVE-2006-5000
    45Plan

    Multiple buffer overflows in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote aut

    MediumCVSS 6.5No exploitEPSS 64%

    ipswitch · ws ftp serverSep 26, 2006

  • CVE-2006-5001
    30Monitor

    Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certa

    MediumCVSS 5.0No exploitEPSS 31%

    ipswitch · ws ftp serverSep 26, 2006

  • CVE-2006-4924
    42Plan

    sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) vi

    HighCVSS 7.8Proof of conceptEPSS 37%

    openbsd · opensshSep 26, 2006

  • CVE-2006-4694
    41Plan

    Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitr

    CriticalCVSS 9.3No exploitEPSS 13%

    microsoft · officeSep 27, 2006

  • CVE-2006-5020
    35Monitor

    Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a

    HighCVSS 7.5Proof of conceptEPSS 17%

    solidstate · solidstateSep 27, 2006

  • CVE-2006-5028
    34Monitor

    Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remot

    MediumCVSS 5.0Proof of conceptEPSS 46%

    swsoft · pleskSep 27, 2006

  • CVE-2006-5048
    32Monitor

    Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow rem

    MediumCVSS 6.8Proof of conceptEPSS 15%

    joomla · joomla\!Sep 27, 2006

  • CVE-2006-5051
    45Plan

    Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbit

    HighCVSS 8.1Proof of conceptEPSS 44%

    openbsd · opensshSep 27, 2006

  • CVE-2006-5058
    33Monitor

    Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and ea

    HighCVSS 7.5Proof of conceptEPSS 10%

    activision · call of dutySep 27, 2006

  • CVE-2006-2937
    34Monitor

    OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumpti

    HighCVSS 7.8No exploitEPSS 10%

    openssl · opensslSep 28, 2006

  • CVE-2006-3738
    55Plan

    Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspeci

    CriticalCVSS 10.0No exploitEPSS 49%

    openssl · opensslSep 28, 2006

  • CVE-2006-4343
    23Monitor

    The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remo

    MediumCVSS 4.3Proof of conceptEPSS 19%

    openssl · opensslSep 28, 2006

  • CVE-2006-4925
    25Monitor

    packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUT

    MediumCVSS 5.0No exploitEPSS 15%

    openbsd · opensshSep 28, 2006

  • CVE-2006-5084
    35Monitor

    Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a de

    HighCVSS 7.5Proof of conceptEPSS 16%

    skype technologies · skypeSep 28, 2006

  • CVE-2006-5085
    44Plan

    Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the n

    HighCVSS 7.5Proof of conceptEPSS 47%

    pixel motion · pixel motion blogSep 28, 2006