# CVEs published 2006-11-14 27 CVEs were published on November 14, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-4688](https://cve.now/CVE-2006-4688.md): Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote… (no CVSS) - [CVE-2006-4689](https://cve.now/CVE-2006-4689.md): Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003… (no CVSS) - [CVE-2006-5461](https://cve.now/CVE-2006-5461.md): Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another… (no CVSS) - [CVE-2006-5885](https://cve.now/CVE-2006-5885.md): SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID… (no CVSS) - [CVE-2006-5886](https://cve.now/CVE-2006-5886.md): SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to… (no CVSS) - [CVE-2006-5887](https://cve.now/CVE-2006-5887.md): SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-5888](https://cve.now/CVE-2006-5888.md): SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-5889](https://cve.now/CVE-2006-5889.md): SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id… (no CVSS) - [CVE-2006-5890](https://cve.now/CVE-2006-5890.md): SQL injection vulnerability in detail.asp in Superfreaker Studios USupport 1.0 allows remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2006-5891](https://cve.now/CVE-2006-5891.md): SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via… (no CVSS) - [CVE-2006-5892](https://cve.now/CVE-2006-5892.md): SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-5893](https://cve.now/CVE-2006-5893.md): Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP… (no CVSS) - [CVE-2006-5894](https://cve.now/CVE-2006-5894.md): Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register\_globals is enabled, allows remote attackers to… (no CVSS) - [CVE-2006-5895](https://cve.now/CVE-2006-5895.md): PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrary PHP code via a… (no CVSS) - [CVE-2006-3445](https://cve.now/CVE-2006-3445.md): Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003… (no CVSS) - [CVE-2006-4687](https://cve.now/CVE-2006-4687.md): Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV… (no CVSS) - [CVE-2006-4691](https://cve.now/CVE-2006-4691.md): Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and… (no CVSS) - [CVE-2006-5198](https://cve.now/CVE-2006-5198.md): The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows… (no CVSS) - [CVE-2006-5884](https://cve.now/CVE-2006-5884.md): Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown… (no CVSS) - [CVE-2006-4252](https://cve.now/CVE-2006-4252.md): PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a… (no CVSS) - [CVE-2006-4251](https://cve.now/CVE-2006-4251.md): Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS… (no CVSS) - [CVE-2006-5878](https://cve.now/CVE-2006-5878.md): Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions… (no CVSS, trac) - [CVE-2006-5879](https://cve.now/CVE-2006-5879.md): SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2006-5880](https://cve.now/CVE-2006-5880.md): SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitrary SQL commands… (no CVSS) - [CVE-2006-5881](https://cve.now/CVE-2006-5881.md): SQL injection vulnerability in cl\_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2006-5882](https://cve.now/CVE-2006-5882.md): Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N… (no CVSS) - [CVE-2006-5883](https://cve.now/CVE-2006-5883.md): Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2006-11-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.