# CVEs published 2006-04-27

19 CVEs were published on April 27, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-2079](https://cve.now/CVE-2006-2079.md): Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote… (no CVSS)
- [CVE-2006-2080](https://cve.now/CVE-2006-2080.md): SQL injection vulnerability in portfolio\_photo\_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute… (no CVSS)
- [CVE-2006-2081](https://cve.now/CVE-2006-2081.md): Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET\_DOMAIN\_INDEX\_METADATA function in the… (no CVSS)
- [CVE-2006-2072](https://cve.now/CVE-2006-2072.md): Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of… (no CVSS)
- [CVE-2006-2073](https://cve.now/CVE-2006-2073.md): Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG… (no CVSS)
- [CVE-2006-2074](https://cve.now/CVE-2006-2074.md): Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to… (no CVSS)
- [CVE-2006-2075](https://cve.now/CVE-2006-2075.md): Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via a crafted DNS message, aka… (no CVSS)
- [CVE-2006-2076](https://cve.now/CVE-2006-2076.md): Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumption) via a DNS query… (no CVSS)
- [CVE-2006-2077](https://cve.now/CVE-2006-2077.md): Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact and attack vectors. (no CVSS)
- [CVE-2006-2078](https://cve.now/CVE-2006-2078.md): Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow… (no CVSS)
- [CVE-2006-2071](https://cve.now/CVE-2006-2071.md): Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory… (no CVSS)
- [CVE-2006-1514](https://cve.now/CVE-2006-1514.md): Multiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions, allow remote attackers to execute… (no CVSS)
- [CVE-2006-2064](https://cve.now/CVE-2006-2064.md): Unspecified vulnerability in the libpkcs11 library in Sun Solaris 10 might allow local users to gain privileges or cause a denial of… (no CVSS)
- [CVE-2006-2065](https://cve.now/CVE-2006-2065.md): SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-2066](https://cve.now/CVE-2006-2066.md): Multiple cross-site scripting (XSS) vulnerabilities pm\_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and… (no CVSS)
- [CVE-2006-2067](https://cve.now/CVE-2006-2067.md): SQL injection vulnerability in vb\_board\_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers… (no CVSS)
- [CVE-2006-2068](https://cve.now/CVE-2006-2068.md): Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of service (application stop or fail) via… (no CVSS)
- [CVE-2006-2069](https://cve.now/CVE-2006-2069.md): The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets. (no CVSS)
- [CVE-2006-2070](https://cve.now/CVE-2006-2070.md): Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbitrary web script… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-04-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.