# CVEs published 2006-01-14 9 CVEs were published on January 14, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2005-3655](https://cve.now/CVE-2005-3655.md): Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) in Novell SUSE Linux Enterprise Server 9 allows remo (no CVSS) - [CVE-2005-4650](https://cve.now/CVE-2005-4650.md): Joomla! 1.03 does not restrict the number of "Search" Mambots, which allows remote attackers to cause a denial of service (resource consumpt (CVSS 5.3) - [CVE-2005-4651](https://cve.now/CVE-2005-4651.md): SQL injection vulnerability in index.php in AlstraSoft EPay Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the pmodul (no CVSS) - [CVE-2005-4652](https://cve.now/CVE-2005-4652.md): SQL injection vulnerability in PHlyMail 3.02.01 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. (no CVSS) - [CVE-2006-0209](https://cve.now/CVE-2006-0209.md): SQL injection vulnerability in general\_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS) - [CVE-2006-0210](https://cve.now/CVE-2006-0210.md): Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-0211](https://cve.now/CVE-2006-0211.md): Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows remote attackers to in (no CVSS) - [CVE-2006-0212](https://cve.now/CVE-2006-0212.md): Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload (no CVSS) - [CVE-2006-0213](https://cve.now/CVE-2006-0213.md): Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentic (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-01-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.