# CVEs published 2006-01-10

21 CVEs were published on January 10, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0002](https://cve.now/CVE-2006-0002.md): Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows (no CVSS)
- [CVE-2006-0010](https://cve.now/CVE-2006-0010.md): Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows (no CVSS)
- [CVE-2005-4642](https://cve.now/CVE-2005-4642.md): Multiple cross-site scripting (XSS) vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-4643](https://cve.now/CVE-2005-4643.md): SQL injection vulnerability in index.php in Antharia OnContent // CMS allows remote attackers to execute arbitrary SQL commands via the pid (no CVSS)
- [CVE-2006-0020](https://cve.now/CVE-2006-0020.md): An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millenni (no CVSS)
- [CVE-2006-0105](https://cve.now/CVE-2006-0105.md): PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmas (no CVSS)
- [CVE-2004-0780](https://cve.now/CVE-2004-0780.md): Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command line argument. (no CVSS)
- [CVE-2006-0161](https://cve.now/CVE-2006-0161.md): Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. (no CVSS)
- [CVE-2006-0162](https://cve.now/CVE-2006-0162.md): Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (c (no CVSS)
- [CVE-2005-4639](https://cve.now/CVE-2005-4639.md): Buffer overflow in the CA-driver (dst\_ca.c) for TwinHan DST Frontend/Card in Linux kernel 2.6.12 and other versions before 2.6.15 allows loc (no CVSS)
- [CVE-2005-4640](https://cve.now/CVE-2005-4640.md): SQL injection vulnerability in index.php in class-1 Poll Software 0.4 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2005-4641](https://cve.now/CVE-2005-4641.md): SQL injection vulnerability in home.php in eazyCMS 2.0 allows remote attackers to execute arbitrary SQL commands via the page\_id parameter. (no CVSS)
- [CVE-2006-0152](https://cve.now/CVE-2006-0152.md): Cross-site scripting (XSS) in search\_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-0153](https://cve.now/CVE-2006-0153.md): 427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote atta (no CVSS)
- [CVE-2006-0154](https://cve.now/CVE-2006-0154.md): SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the Forum (no CVSS)
- [CVE-2006-0155](https://cve.now/CVE-2006-0155.md): Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a ne (no CVSS)
- [CVE-2006-0156](https://cve.now/CVE-2006-0156.md): Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in b (no CVSS)
- [CVE-2006-0157](https://cve.now/CVE-2006-0157.md): settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action t (no CVSS)
- [CVE-2006-0158](https://cve.now/CVE-2006-0158.md): SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL commands via the page pa (no CVSS)
- [CVE-2006-0159](https://cve.now/CVE-2006-0159.md): SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email param (no CVSS)
- [CVE-2006-0160](https://cve.now/CVE-2006-0160.md): SQL injection vulnerability in add\_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) paren (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.