# CVEs published 2006-01-11 30 CVEs were published on January 11, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2005-4644](https://cve.now/CVE-2005-4644.md): Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web… (no CVSS, trac) - [CVE-2005-4645](https://cve.now/CVE-2005-4645.md): SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter. (no CVSS) - [CVE-2005-4646](https://cve.now/CVE-2005-4646.md): Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary files via the mode… (no CVSS) - [CVE-2005-4647](https://cve.now/CVE-2005-4647.md): Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS) - [CVE-2006-0035](https://cve.now/CVE-2006-0035.md): The netlink\_rcv\_skb function in af\_netlink.c in Linux kernel 2.6.14 and 2.6.15 allows local users to cause a denial of service (infinite… (no CVSS) - [CVE-2006-0054](https://cve.now/CVE-2006-0054.md): The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that… (CVSS 5.3) - [CVE-2006-0055](https://cve.now/CVE-2006-0055.md): The ispell\_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which… (no CVSS) - [CVE-2006-0163](https://cve.now/CVE-2006-0163.md): SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute… (no CVSS) - [CVE-2006-0164](https://cve.now/CVE-2006-0164.md): phgstats.inc.php in phgstats before 0.5.1, if register\_globals is enabled, allows remote attackers to include arbitrary files and execute… (no CVSS) - [CVE-2006-0165](https://cve.now/CVE-2006-0165.md): Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote… (no CVSS) - [CVE-2006-0166](https://cve.now/CVE-2006-0166.md): Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin… (no CVSS) - [CVE-2006-0167](https://cve.now/CVE-2006-0167.md): SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal\_id parameter in… (no CVSS) - [CVE-2006-0168](https://cve.now/CVE-2006-0168.md): Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS) - [CVE-2006-0169](https://cve.now/CVE-2006-0169.md): addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the… (no CVSS) - [CVE-2006-0171](https://cve.now/CVE-2006-0171.md): PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in… (no CVSS) - [CVE-2006-0172](https://cve.now/CVE-2006-0172.md): Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise… (no CVSS) - [CVE-2006-0173](https://cve.now/CVE-2006-0173.md): Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and… (no CVSS) - [CVE-2006-0174](https://cve.now/CVE-2006-0174.md): Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive… (no CVSS) - [CVE-2006-0175](https://cve.now/CVE-2006-0175.md): Cross-site scripting (XSS) vulnerability in search\_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script… (no CVSS) - [CVE-2006-0176](https://cve.now/CVE-2006-0176.md): Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain… (no CVSS) - [CVE-2006-0177](https://cve.now/CVE-2006-0177.md): Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long… (no CVSS) - [CVE-2006-0178](https://cve.now/CVE-2006-0178.md): Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the… (no CVSS) - [CVE-2006-0179](https://cve.now/CVE-2006-0179.md): The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to… (no CVSS) - [CVE-2005-2340](https://cve.now/CVE-2005-2340.md): Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime… (no CVSS) - [CVE-2005-3707](https://cve.now/CVE-2005-3707.md): Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files. (no CVSS) - [CVE-2005-3708](https://cve.now/CVE-2005-3708.md): Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files. (no CVSS) - [CVE-2005-3709](https://cve.now/CVE-2005-3709.md): Integer underflow in Apple Quicktime before 7.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute… (no CVSS) - [CVE-2005-3710](https://cve.now/CVE-2005-3710.md): Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified… (no CVSS) - [CVE-2005-3711](https://cve.now/CVE-2005-3711.md): Integer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a TIFF image file with modified (1)… (no CVSS) - [CVE-2005-3713](https://cve.now/CVE-2005-3713.md): Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-01-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.