# CVEs published 2006-12-19

8 CVEs were published on December 19, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6636](https://cve.now/CVE-2006-6636.md): Unspecified vulnerability in the Utility Classes for IBM WebSphere Application Server (WAS) before 5.1.1.13 and 6.x before 6.0.2.17 has… (no CVSS)
- [CVE-2006-6637](https://cve.now/CVE-2006-6637.md): The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets… (no CVSS)
- [CVE-2006-6638](https://cve.now/CVE-2006-6638.md): IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer… (no CVSS)
- [CVE-2006-6639](https://cve.now/CVE-2006-6639.md): Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified vectors related to… (no CVSS)
- [CVE-2006-6640](https://cve.now/CVE-2006-6640.md): Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2006-3896](https://cve.now/CVE-2006-3896.md): The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which… (no CVSS)
- [CVE-2006-6106](https://cve.now/CVE-2006-6106.md): Multiple buffer overflows in the cmtp\_recv\_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel… (no CVSS)
- [CVE-2006-6605](https://cve.now/CVE-2006-6605.md): Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2006-12-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.