# CVEs published 2006-02-04 24 CVEs were published on February 4, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0552](https://cve.now/CVE-2006-0552.md): Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has… (no CVSS) - [CVE-2003-1293](https://cve.now/CVE-2003-1293.md): Multiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrary web script or… (no CVSS) - [CVE-2005-3188](https://cve.now/CVE-2005-3188.md): Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line… (no CVSS) - [CVE-2006-0539](https://cve.now/CVE-2006-0539.md): The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes… (no CVSS) - [CVE-2006-0540](https://cve.now/CVE-2006-0540.md): Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2006-0541](https://cve.now/CVE-2006-0541.md): Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inject arbitrary web… (no CVSS) - [CVE-2006-0542](https://cve.now/CVE-2006-0542.md): Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-0543](https://cve.now/CVE-2006-0543.md): Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac… (no CVSS) - [CVE-2006-0544](https://cve.now/CVE-2006-0544.md): urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application… (no CVSS) - [CVE-2006-0545](https://cve.now/CVE-2006-0545.md): SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to… (no CVSS) - [CVE-2006-0546](https://cve.now/CVE-2006-0546.md): Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote… (no CVSS) - [CVE-2006-0547](https://cve.now/CVE-2006-0547.md): Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and… (no CVSS) - [CVE-2006-0548](https://cve.now/CVE-2006-0548.md): SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote… (no CVSS) - [CVE-2006-0549](https://cve.now/CVE-2006-0549.md): SQL injection vulnerability in the SYS.DBMS\_METADATA\_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow… (no CVSS) - [CVE-2006-0550](https://cve.now/CVE-2006-0550.md): Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service. (no CVSS) - [CVE-2006-0551](https://cve.now/CVE-2006-0551.md): SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to… (no CVSS) - [CVE-2006-0531](https://cve.now/CVE-2006-0531.md): Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain… (no CVSS) - [CVE-2006-0532](https://cve.now/CVE-2006-0532.md): Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2006-0533](https://cve.now/CVE-2006-0533.md): Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2006-0534](https://cve.now/CVE-2006-0534.md): Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject… (no CVSS) - [CVE-2006-0535](https://cve.now/CVE-2006-0535.md): Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2006-0536](https://cve.now/CVE-2006-0536.md): Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS) - [CVE-2006-0537](https://cve.now/CVE-2006-0537.md): Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code… (no CVSS) - [CVE-2006-0538](https://cve.now/CVE-2006-0538.md): CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-02-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.