# CVEs published 2006-01-18 62 CVEs were published on January 18, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0256](https://cve.now/CVE-2006-0256.md): Unspecified vulnerability in the Advanced Queuing component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.6, 10.1.0.3 has unspecified im (no CVSS) - [CVE-2006-0257](https://cve.now/CVE-2006-0257.md): Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified imp (no CVSS) - [CVE-2006-0258](https://cve.now/CVE-2006-0258.md): Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspecified impact and attac (no CVSS) - [CVE-2006-0259](https://cve.now/CVE-2006-0259.md): Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle (no CVSS) - [CVE-2006-0260](https://cve.now/CVE-2006-0260.md): Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identifie (no CVSS) - [CVE-2006-0261](https://cve.now/CVE-2006-0261.md): Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unspecified impact and attack ve (no CVSS) - [CVE-2006-0262](https://cve.now/CVE-2006-0262.md): Unspecified vulnerability in the Net Foundation Layer component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1. (no CVSS) - [CVE-2006-0263](https://cve.now/CVE-2006-0263.md): Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecif (no CVSS) - [CVE-2006-0265](https://cve.now/CVE-2006-0265.md): Multiple unspecified vulnerabilities in Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.1 have unspecified impact and (no CVSS) - [CVE-2006-0266](https://cve.now/CVE-2006-0266.md): Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unspecified impact a (no CVSS) - [CVE-2006-0267](https://cve.now/CVE-2006-0267.md): Unspecified vulnerability in the Query Optimizer component of Oracle Database server 9.2.0.6 and 10.1.0.4 has unspecified impact and attack (no CVSS) - [CVE-2006-0268](https://cve.now/CVE-2006-0268.md): Unspecified vulnerability in the Security component of Oracle Database server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.6, and 10.1.0.4 has unspecified i (no CVSS) - [CVE-2006-0269](https://cve.now/CVE-2006-0269.md): Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack (no CVSS) - [CVE-2006-0270](https://cve.now/CVE-2006-0270.md): Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impac (no CVSS) - [CVE-2006-0271](https://cve.now/CVE-2006-0271.md): Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspeci (no CVSS) - [CVE-2006-0272](https://cve.now/CVE-2006-0272.md): Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vec (no CVSS) - [CVE-2006-0273](https://cve.now/CVE-2006-0273.md): Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vector (no CVSS) - [CVE-2006-0274](https://cve.now/CVE-2006-0274.md): Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impa (no CVSS) - [CVE-2006-0275](https://cve.now/CVE-2006-0275.md): Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack v (no CVSS) - [CVE-2006-0276](https://cve.now/CVE-2006-0276.md): Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecified impact and attack (no CVSS) - [CVE-2006-0277](https://cve.now/CVE-2006-0277.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as iden (no CVSS) - [CVE-2006-0278](https://cve.now/CVE-2006-0278.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as ident (no CVSS) - [CVE-2006-0279](https://cve.now/CVE-2006-0279.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identifi (no CVSS) - [CVE-2006-0280](https://cve.now/CVE-2006-0280.md): Unspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10, and 8.9 Bundle 2 has unspecified impact and a (no CVSS) - [CVE-2006-0281](https://cve.now/CVE-2006-0281.md): Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23\_L1 has unspecified impact and attack vectors, as identified by Oracl (no CVSS) - [CVE-2006-0282](https://cve.now/CVE-2006-0282.md): Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, Application Server 1.0.2.2, 9.0.4 (no CVSS) - [CVE-2006-0283](https://cve.now/CVE-2006-0283.md): Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2, version 9. (no CVSS) - [CVE-2006-0284](https://cve.now/CVE-2006-0284.md): Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, hav (no CVSS) - [CVE-2006-0285](https://cve.now/CVE-2006-0285.md): Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and App (no CVSS) - [CVE-2006-0286](https://cve.now/CVE-2006-0286.md): Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, and Ap (no CVSS) - [CVE-2006-0287](https://cve.now/CVE-2006-0287.md): Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspe (no CVSS) - [CVE-2006-0288](https://cve.now/CVE-2006-0288.md): Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and E-Business Suite and (no CVSS) - [CVE-2006-0289](https://cve.now/CVE-2006-0289.md): Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecif (no CVSS) - [CVE-2006-0290](https://cve.now/CVE-2006-0290.md): Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version (no CVSS) - [CVE-2006-0291](https://cve.now/CVE-2006-0291.md): Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Releas (no CVSS) - [CVE-2005-3658](https://cve.now/CVE-2005-3658.md): Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as (no CVSS) - [CVE-2005-3659](https://cve.now/CVE-2005-3659.md): nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6 (no CVSS) - [CVE-2006-0044](https://cve.now/CVE-2006-0044.md): Unspecified vulnerability in context.py in Albatross web application toolkit before 1.33 allows remote attackers to execute arbitrary comman (no CVSS) - [CVE-2006-0243](https://cve.now/CVE-2006-0243.md): Cross-site scripting (XSS) vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the text parameter (no CVSS) - [CVE-2006-0244](https://cve.now/CVE-2006-0244.md): Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (no CVSS) - [CVE-2006-0245](https://cve.now/CVE-2006-0245.md): Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-0246](https://cve.now/CVE-2006-0246.md): Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script o (no CVSS) - [CVE-2006-0247](https://cve.now/CVE-2006-0247.md): Cross-site scripting (XSS) vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-0248](https://cve.now/CVE-2006-0248.md): Virata-EmWeb web server 6\_1\_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies CopperJet 811 RouterPlus, allow (no CVSS) - [CVE-2006-0249](https://cve.now/CVE-2006-0249.md): SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD\_1.0 allows remote attackers to execute arbitrary SQL commands, then ste (no CVSS) - [CVE-2006-0250](https://cve.now/CVE-2006-0250.md): Format string vulnerability in the snmp\_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote attackers to execute arbi (no CVSS) - [CVE-2006-0251](https://cve.now/CVE-2006-0251.md): Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-0252](https://cve.now/CVE-2006-0252.md): SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as de (no CVSS) - [CVE-2006-0253](https://cve.now/CVE-2006-0253.md): Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allo (no CVSS) - [CVE-2006-0254](https://cve.now/CVE-2006-0254.md): Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via (no CVSS, geronimo:geronimo-console-standard) - [CVE-2006-0255](https://cve.now/CVE-2006-0255.md): Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "pro (no CVSS) - [CVE-2006-0235](https://cve.now/CVE-2006-0235.md): SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir parameter to pictures.ph (no CVSS) - [CVE-2006-0236](https://cve.now/CVE-2006-0236.md): GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code (no CVSS) - [CVE-2006-0237](https://cve.now/CVE-2006-0237.md): Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web script or HTML via th (no CVSS) - [CVE-2006-0238](https://cve.now/CVE-2006-0238.md): SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author (no CVSS) - [CVE-2006-0239](https://cve.now/CVE-2006-0239.md): Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) (no CVSS) - [CVE-2006-0240](https://cve.now/CVE-2006-0240.md): Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter i (no CVSS) - [CVE-2006-0241](https://cve.now/CVE-2006-0241.md): Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name f (no CVSS) - [CVE-2006-0242](https://cve.now/CVE-2006-0242.md): Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2005-3126](https://cve.now/CVE-2005-3126.md): The (1) kantiword (kantiword.sh) and (2) gantiword (gantiword.sh) scripts in antiword 0.35 and earlier allow local users to overwrite arbitr (no CVSS) - [CVE-2006-0233](https://cve.now/CVE-2006-0233.md): Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and (no CVSS) - [CVE-2006-0234](https://cve.now/CVE-2006-0234.md): SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-01-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.