# CVEs published 2006-01-31

18 CVEs were published on January 31, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0483](https://cve.now/CVE-2006-0483.md): Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device… (no CVSS)
- [CVE-2006-0484](https://cve.now/CVE-2006-0484.md): Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-0482](https://cve.now/CVE-2006-0482.md): Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date… (no CVSS)
- [CVE-2006-0481](https://cve.now/CVE-2006-0481.md): Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service… (no CVSS)
- [CVE-2005-4676](https://cve.now/CVE-2005-4676.md): Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote… (no CVSS)
- [CVE-2006-0470](https://cve.now/CVE-2006-0470.md): Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2006-0471](https://cve.now/CVE-2006-0471.md): Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified… (no CVSS)
- [CVE-2006-0472](https://cve.now/CVE-2006-0472.md): Cross-site scripting (XSS) vulnerability in guestbook.php in my little homepage my little guestbook, as last modified in March 2004… (no CVSS)
- [CVE-2006-0473](https://cve.now/CVE-2006-0473.md): Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in… (no CVSS)
- [CVE-2006-0474](https://cve.now/CVE-2006-0474.md): Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via (1) a large packet length field, which… (no CVSS)
- [CVE-2006-0475](https://cve.now/CVE-2006-0475.md): PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service (ping flood) via a… (no CVSS)
- [CVE-2006-0476](https://cve.now/CVE-2006-0476.md): Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name… (no CVSS)
- [CVE-2006-0477](https://cve.now/CVE-2006-0477.md): Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long… (no CVSS)
- [CVE-2006-0478](https://cve.now/CVE-2006-0478.md): CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct… (no CVSS)
- [CVE-2006-0479](https://cve.now/CVE-2006-0479.md): pmwiki.php in PmWiki 2.1 beta 20, with register\_globals enabled, allows remote attackers to bypass protection mechanisms that deregister… (no CVSS)
- [CVE-2006-0480](https://cve.now/CVE-2006-0480.md): Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-0043](https://cve.now/CVE-2006-0043.md): Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute… (no CVSS)
- [CVE-2006-0467](https://cve.now/CVE-2006-0467.md): Unspecified vulnerability in Pioneers (formerly gnocatan) before 0.9.49 allows remote attackers to cause a denial of service (application… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-01-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.