Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
395,963 CVEs1,717 in CISA KEV17,157 with EPSS ≥ 10%25,049 with a public exploitUpdated 22 September 2026
17,157 results · page 305 of 344
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2006-3638 | Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the… | HIGH 7.5EPSS 36.8% | 8 August 2006 |
| CVE-2006-3637 | Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary code via a crafted HTML file that leads to memory corruption, aka "HTML… | EXPLOIT ✓MEDIUM 5.1EPSS 43.8% | 8 August 2006 |
| CVE-2006-3451 | Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via… | HIGH 7.5EPSS 41.2% | 8 August 2006 |
| CVE-2006-3450 | Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID Javascript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain… | HIGH 7.5EPSS 41.1% | 8 August 2006 |
| CVE-2006-4018 | Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values. | EXPLOIT ✓HIGH 7.5EPSS 19.4% | 8 August 2006 |
| CVE-2006-0395 | The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types. | EXPLOIT ×2 ✓MEDIUM 5.1EPSS 55.4% | 5 August 2006 |
| CVE-2006-3995 | Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5… | EXPLOIT ✓MEDIUM 6.8EPSS 11.0% | 5 August 2006 |
| CVE-2006-3990 | Multiple PHP remote file inclusion vulnerabilities in Paul M. | EXPLOIT ×2 ✓HIGH 7.5EPSS 18.7% | 5 August 2006 |
| CVE-2006-3459 | Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, as used in Adobe Reader 9.3.0 and other products, allow context-dependent attackers to execute arbitrary code or cause a denial of service via unspecified vectors,… | EXPLOIT ×6 ✓HIGH 7.5EPSS 53.7% | 3 August 2006 |
| CVE-2006-3961 | Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean… | EXPLOIT ✓MEDIUM 6.8EPSS 34.4% | 1 August 2006 |
| CVE-2006-3952 | Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command. | EXPLOIT ×4 ✓HIGH 7.5EPSS 66.8% | 1 August 2006 |
| CVE-2006-3944 | Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1 object with the ListWidth property set to (a) 0x7fffffff, which triggers an integer overflow… | EXPLOIT ✓MEDIUM 5.0EPSS 17.5% | 31 July 2006 |
| CVE-2006-3943 | Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via long (1) RGBExtraColor, (2) RGBForeColor, and (3) RGBBackColor properties. | EXPLOIT ✓LOW 2.6EPSS 15.6% | 31 July 2006 |
| CVE-2006-3942 | The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination,… | EXPLOIT ✓HIGH 7.8EPSS 75.0% | 31 July 2006 |
| CVE-2006-3747 | Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled, allows remote attackers to cause a denial of service… | EXPLOIT ×4 ✓HIGH 7.6EPSS 96.6% | 28 July 2006 |
| CVE-2006-3918 | http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back… | EXPLOIT ✓MEDIUM 4.3EPSS 95.1% | 28 July 2006 |
| CVE-2006-3915 | Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window.alert function, which triggers a null dereference. | EXPLOIT ✓MEDIUM 5.0EPSS 21.6% | 28 July 2006 |
| CVE-2006-3911 | PHP remote file inclusion vulnerability in OSI Codes PHP Live! | EXPLOIT ✓HIGH 7.5EPSS 16.3% | 28 July 2006 |
| CVE-2006-3910 | Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling the NewDefaultItem function of an OVCtl (OVCtl.OVCtl.1) ActiveX object, which triggers a null dereference. | EXPLOIT ✓MEDIUM 5.0EPSS 17.1% | 28 July 2006 |
| CVE-2006-3677 | Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash… | EXPLOIT ×3 ✓HIGH 7.5EPSS 78.7% | 27 July 2006 |
| CVE-2006-3899 | Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the stringToBinary function of the CEnroll.CEnroll.2 ActiveX object with a long second argument, which triggers an… | EXPLOIT ✓MEDIUM 5.0EPSS 24.3% | 27 July 2006 |
| CVE-2006-3898 | Microsoft Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to cause a denial of service (application crash) by calling the Click method of the Internet.HHCtrl.1 ActiveX object before initializing the URL, which triggers a null dereference. | EXPLOIT ✓MEDIUM 5.0EPSS 24.3% | 27 July 2006 |
| CVE-2006-3897 | Stack overflow in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (application crash) by creating an NMSA.ASFSourceMediaDescription.1 ActiveX object with a long dispValue property. | EXPLOIT ✓MEDIUM 5.0EPSS 23.3% | 27 July 2006 |
| CVE-2006-3880 | Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums… | EXPLOIT ✓MEDIUM 5.0EPSS 24.7% | 27 July 2006 |
| CVE-2006-3838 | Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer… | EXPLOIT ×6 ✓HIGH 10.0EPSS 73.6% | 27 July 2006 |
| CVE-2006-3835 | Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do. | EXPLOIT ✓MEDIUM 5.0EPSS 46.2% | 25 July 2006 |
| CVE-2006-3772 | PHP-Post 0.21 and 1.0, and possibly earlier versions, when auto-login is enabled, allows remote attackers to bypass security restrictions and obtain administrative privileges by modifying the logincookie[user] setting in the login cookie. | EXPLOIT ✓MEDIUM 5.1EPSS 16.8% | 24 July 2006 |
| CVE-2006-3771 | Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) articles.php, (2) contact.php, (3)… | EXPLOIT ✓HIGH 7.5EPSS 16.3% | 24 July 2006 |
| CVE-2006-3733 | jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and… | EXPLOIT ✓HIGH 7.5EPSS 12.0% | 21 July 2006 |
| CVE-2006-3730 | Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a 0x7fffffff argument to the setSlice method on a WebViewFolderIcon ActiveX object, which… | EXPLOIT ×5 ✓HIGH 8.8EPSS 63.8% | 21 July 2006 |
| CVE-2006-3729 | DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash) via a large negative integer argument to the getDataMemberName method of a OWC11.DataSourceControl.11 object,… | EXPLOIT ✓LOW 2.6EPSS 20.6% | 21 July 2006 |
| CVE-2006-3726 | Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary code via a long argument to the LIST command. | EXPLOIT ×2 ✓MEDIUM 6.5EPSS 63.7% | 21 July 2006 |
| CVE-2006-3687 | Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote… | EXPLOIT ✓HIGH 7.5EPSS 19.5% | 21 July 2006 |
| CVE-2006-3469 | Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format… | EXPLOIT ✓MEDIUM 4.0EPSS 29.0% | 21 July 2006 |
| CVE-2006-3468 | Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and… | EXPLOIT ✓HIGH 7.8EPSS 16.0% | 21 July 2006 |
| CVE-2006-3668 | Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" (Impulse… | EXPLOIT ✓HIGH 7.6EPSS 10.1% | 18 July 2006 |
| CVE-2006-3660 | Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. | EXPLOIT ✓HIGH 7.6EPSS 18.2% | 18 July 2006 |
| CVE-2006-3659 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object. | MEDIUM 5.0EPSS 14.9% | 18 July 2006 |
| CVE-2006-3658 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object, which triggers a null dereference in the security check. | MEDIUM 5.0EPSS 12.6% | 18 July 2006 |
| CVE-2006-3657 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property. | MEDIUM 5.0EPSS 16.6% | 18 July 2006 |
| CVE-2006-3656 | Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed. | EXPLOIT ✓LOW 2.6EPSS 20.5% | 18 July 2006 |
| CVE-2006-3655 | Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file. | EXPLOIT ✓MEDIUM 5.1EPSS 20.9% | 18 July 2006 |
| CVE-2006-3654 | Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted Excel files. | LOW 2.6EPSS 47.9% | 18 July 2006 |
| CVE-2006-3653 | wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files. | EXPLOIT ✓LOW 2.6EPSS 14.9% | 18 July 2006 |
| CVE-2006-3652 | Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character. | HIGH 7.5EPSS 18.9% | 18 July 2006 |
| CVE-2006-3605 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference. | EXPLOIT ✓MEDIUM 5.0EPSS 24.3% | 18 July 2006 |
| CVE-2006-3591 | Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocument.TriEditDocument object before it has been initialized, which triggers a NULL pointer dereference. | EXPLOIT ✓MEDIUM 5.0EPSS 26.2% | 18 July 2006 |
| CVE-2006-3590 | mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue… | MEDIUM 5.1EPSS 14.3% | 14 July 2006 |
| CVE-2006-2388 | Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process. | HIGH 9.3EPSS 10.8% | 13 July 2006 |
| CVE-2006-1304 | Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with a crafted COLINFO record, which triggers the overflow during a "data filling operation." | HIGH 9.3EPSS 10.8% | 13 July 2006 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.