# CVEs published 2006-01-21 26 CVEs were published on January 21, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0345](https://cve.now/CVE-2006-0345.md): Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to (no CVSS) - [CVE-2006-0346](https://cve.now/CVE-2006-0346.md): Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field (no CVSS) - [CVE-2006-0347](https://cve.now/CVE-2006-0347.md): Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via " (no CVSS) - [CVE-2006-0348](https://cve.now/CVE-2006-0348.md): Format string vulnerability in the write\_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service (server (no CVSS) - [CVE-2006-0349](https://cve.now/CVE-2006-0349.md): SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php. (no CVSS) - [CVE-2006-0350](https://cve.now/CVE-2006-0350.md): Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field (no CVSS) - [CVE-2006-0351](https://cve.now/CVE-2006-0351.md): Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors. (no CVSS) - [CVE-2006-0352](https://cve.now/CVE-2006-0352.md): The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which (no CVSS) - [CVE-2006-0327](https://cve.now/CVE-2006-0327.md): TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.p (no CVSS) - [CVE-2006-0328](https://cve.now/CVE-2006-0328.md): Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename (no CVSS) - [CVE-2006-0329](https://cve.now/CVE-2006-0329.md): SQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows remote attackers to execute arbitrary SQL comm (no CVSS) - [CVE-2006-0330](https://cve.now/CVE-2006-0330.md): Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown (no CVSS) - [CVE-2006-0331](https://cve.now/CVE-2006-0331.md): Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line argum (no CVSS) - [CVE-2006-0332](https://cve.now/CVE-2006-0332.md): Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers (no CVSS) - [CVE-2006-0333](https://cve.now/CVE-2006-0333.md): Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or (no CVSS) - [CVE-2006-0334](https://cve.now/CVE-2006-0334.md): Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2006-0335](https://cve.now/CVE-2006-0335.md): Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a denial of service via (no CVSS) - [CVE-2006-0336](https://cve.now/CVE-2006-0336.md): Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors in (no CVSS) - [CVE-2006-0337](https://cve.now/CVE-2006-0337.md): Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 a (no CVSS) - [CVE-2006-0338](https://cve.now/CVE-2006-0338.md): Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Interne (no CVSS) - [CVE-2006-0339](https://cve.now/CVE-2006-0339.md): Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a (no CVSS) - [CVE-2006-0340](https://cve.now/CVE-2006-0340.md): Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, w (no CVSS) - [CVE-2006-0341](https://cve.now/CVE-2006-0341.md): Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to inject (no CVSS) - [CVE-2006-0342](https://cve.now/CVE-2006-0342.md): RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CPU consumption and cra (no CVSS) - [CVE-2006-0343](https://cve.now/CVE-2006-0343.md): Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows attackers to stop the Por (no CVSS) - [CVE-2006-0344](https://cve.now/CVE-2006-0344.md): Directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote attackers to read and write arbitrary files via a . (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-01-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.