# CVEs published 2006-01-10

21 CVEs were published on January 10, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0002](https://cve.now/CVE-2006-0002.md): Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office… (no CVSS)
- [CVE-2006-0010](https://cve.now/CVE-2006-0010.md): Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and… (no CVSS)
- [CVE-2005-4642](https://cve.now/CVE-2005-4642.md): Multiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2005-4643](https://cve.now/CVE-2005-4643.md): SQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-0020](https://cve.now/CVE-2006-0020.md): An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows… (no CVSS)
- [CVE-2006-0105](https://cve.now/CVE-2006-0105.md): PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2004-0780](https://cve.now/CVE-2004-0780.md): Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command line argument. (no CVSS)
- [CVE-2006-0161](https://cve.now/CVE-2006-0161.md): Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. (no CVSS)
- [CVE-2006-0162](https://cve.now/CVE-2006-0162.md): Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2005-4639](https://cve.now/CVE-2005-4639.md): Buffer overflow in the CA-driver (dst\_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows… (no CVSS)
- [CVE-2005-4640](https://cve.now/CVE-2005-4640.md): SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2005-4641](https://cve.now/CVE-2005-4641.md): SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the page\_id parameter. (no CVSS)
- [CVE-2006-0152](https://cve.now/CVE-2006-0152.md): Cross-site scripting (XSS) in search\_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-0153](https://cve.now/CVE-2006-0153.md): 427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote… (no CVSS)
- [CVE-2006-0154](https://cve.now/CVE-2006-0154.md): SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-0155](https://cve.now/CVE-2006-0155.md): Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a… (no CVSS)
- [CVE-2006-0156](https://cve.now/CVE-2006-0156.md): Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in… (no CVSS)
- [CVE-2006-0157](https://cve.now/CVE-2006-0157.md): settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action… (no CVSS)
- [CVE-2006-0158](https://cve.now/CVE-2006-0158.md): SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL commands via the page… (no CVSS)
- [CVE-2006-0159](https://cve.now/CVE-2006-0159.md): SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email… (no CVSS)
- [CVE-2006-0160](https://cve.now/CVE-2006-0160.md): SQL injection vulnerability in add\_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.