# CVEs published 2006-08-29 23 CVEs were published on August 29, 2006: 1 critical, 0 high. Days are UTC. - [CVE-2006-4439](https://cve.now/CVE-2006-4439.md): pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file… (no CVSS) - [CVE-2006-4440](https://cve.now/CVE-2006-4440.md): PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute… (no CVSS) - [CVE-2006-4441](https://cve.now/CVE-2006-4441.md): Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary… (no CVSS) - [CVE-2006-4442](https://cve.now/CVE-2006-4442.md): Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML… (no CVSS) - [CVE-2006-4443](https://cve.now/CVE-2006-4443.md): PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary… (no CVSS) - [CVE-2006-4444](https://cve.now/CVE-2006-4444.md): Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL… (no CVSS) - [CVE-2006-4445](https://cve.now/CVE-2006-4445.md): Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS) - [CVE-2006-4421](https://cve.now/CVE-2006-4421.md): Cross-site scripting (XSS) vulnerability in template/default/thanks\_comment.php in Yet Another PHP Image Gallery (YaPIG) 0.95b allows… (no CVSS) - [CVE-2006-4422](https://cve.now/CVE-2006-4422.md): PHP remote file inclusion vulnerability in includes/phpdig/libs/search\_function.php in Jetbox CMS 2.1 allows remote attackers to execute… (no CVSS) - [CVE-2006-4423](https://cve.now/CVE-2006-4423.md): Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS) - [CVE-2006-4424](https://cve.now/CVE-2006-4424.md): PHP remote file inclusion vulnerability in coin\_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP… (no CVSS) - [CVE-2006-4425](https://cve.now/CVE-2006-4425.md): Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the… (no CVSS) - [CVE-2006-4426](https://cve.now/CVE-2006-4426.md): PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES) 1.0a5 and earlier… (no CVSS) - [CVE-2006-4427](https://cve.now/CVE-2006-4427.md): index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the (1) adminloggedin… (no CVSS) - [CVE-2006-4428](https://cve.now/CVE-2006-4428.md): PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary PHP code via a URL… (CVSS 9.8) - [CVE-2006-4429](https://cve.now/CVE-2006-4429.md): PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) allows remote… (no CVSS) - [CVE-2006-4430](https://cve.now/CVE-2006-4430.md): The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Cisco Clean Access… (no CVSS) - [CVE-2006-4431](https://cve.now/CVE-2006-4431.md): Multiple buffer overflows in the (a) Session Clustering Daemon and the (b) mod\_cluster module in the Zend Platform 2.2.1 and earlier allow… (no CVSS) - [CVE-2006-4432](https://cve.now/CVE-2006-4432.md): Directory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to overwrite arbitrary files via a .. (no CVSS) - [CVE-2006-4433](https://cve.now/CVE-2006-4433.md): PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third party session… (no CVSS) - [CVE-2006-4434](https://cve.now/CVE-2006-4434.md): Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header… (no CVSS) - [CVE-2006-4435](https://cve.now/CVE-2006-4435.md): OpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a denial of service (kernel panic) by… (no CVSS) - [CVE-2006-4436](https://cve.now/CVE-2006-4436.md): isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of size 0 when isakmpd… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-08-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.