Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days

Severity (select multiple)

Critical (44,365)High (128,327)Medium (163,441)Low (18,220)Unrated (1,698)

Attack vector (select multiple)

Results

CVE results

128,327 results · Sorted by Highest Buzz score first

CVE-2006-1838

Published Apr 19, 2006

edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

clanscripte.net / fuju_news

CVE-2006-1839

Published Apr 19, 2006

Network

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

php_album / php_album

CVE-2006-1847

Published Apr 19, 2006

SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home f…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

francisco_burzi / php-nuke

CVE-2006-1849

Published Apr 19, 2006

Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) position and (2)…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

skymarx_solutions / xflow

CVE-2006-1852

Published Apr 19, 2006

SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

scriptsfrenzy / article_publisher_pro

CVE-2006-1798

Published Apr 18, 2006

SQL injection vulnerability in rateit.php in RateIt 2.2 allows remote attackers to execute arbitrary SQL commands via the rateit_id parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

rateit / rateit

CVE-2006-1799

Published Apr 18, 2006

censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

adcentrix / censtore

CVE-2006-1800

Published Apr 18, 2006

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language coo…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

simplemedia / simplebbs

CVE-2006-1804

Published Apr 18, 2006

SQL injection vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to execute arbitrary SQL commands via the sql_query parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

phpmyadmin / phpmyadmin

CVE-2006-1805

Published Apr 18, 2006

SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

powerscripts / powerclan

CVE-2006-1807

Published Apr 18, 2006

Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start parameter in a search…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

musicbox / musicbox

CVE-2006-1819

Published Apr 18, 2006

Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arb…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

phpwebsite / phpwebsite

CVE-2006-1793

Published Apr 17, 2006

Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) foru…

CVSS 7.6 · High

Vendor/product tagsBeta · best-effort

runcms / runcms

CVE-2006-1794

Published Apr 17, 2006

SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the m…

CVSS 7.6 · High

Vendor/product tagsBeta · best-effort

CVE-2006-1791

Published Apr 14, 2006

Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers to read or include arbitrary local files via the request parameter. NOTE: this issue can…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

jl_webworks / quickblogger

CVE-2006-1529

Published Apr 14, 2006

Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

mozilla / firefoxmozilla / seamonkeymozilla / thunderbird

CVE-2006-1530

Published Apr 14, 2006

Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

debian / debian_linuxmozilla / firefoxmozilla / seamonkeymozilla / thunderbird

CVE-2006-1531

Published Apr 14, 2006

Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

debian / debian_linuxmozilla / firefoxmozilla / seamonkeymozilla / thunderbird

CVE-2006-1723

Published Apr 14, 2006

Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

mozilla / firefoxmozilla / seamonkeymozilla / thunderbird

CVE-2006-1724

Published Apr 14, 2006

Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to cause a…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

debian / debian_linuxmozilla / firefoxmozilla / mozilla_suitemozilla / seamonkeymozilla / thunderbird

CVE-2006-1727

Published Apr 14, 2006

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attac…

CVSS 7.6 · High

Vendor/product tagsBeta · best-effort

canonical / ubuntu_linuxmozilla / firefoxmozilla / mozilla_suitemozilla / seamonkeymozilla / thunderbird

CVE-2006-1551

Published Apr 13, 2006

Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

georges_auberger / pajax

CVE-2006-1627

Published Apr 13, 2006

Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the (1)…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

adobe / acrobat_reader

CVE-2006-1767

Published Apr 13, 2006

Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path paramet…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

nicecoder / indexu

CVE-2006-1771

Published Apr 13, 2006

Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly e…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

saxotech / saxopress

Showing 122,951-122,975 of 128,327 CVEsPage 4919 of 5134

Previous 1 4918 4919 4920 5134 Next

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.