# CVEs published 2006-01-31

18 CVEs were published on January 31, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0483](https://cve.now/CVE-2006-0483.md): Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reloa (no CVSS)
- [CVE-2006-0484](https://cve.now/CVE-2006-0484.md): Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-0482](https://cve.now/CVE-2006-0482.md): Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date - (no CVSS)
- [CVE-2006-0481](https://cve.now/CVE-2006-0481.md): Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (cr (no CVSS)
- [CVE-2005-4676](https://cve.now/CVE-2005-4676.md): Buffer overflow in Andreas Huggel Exiv2 before 0.9 does not null terminate strings before calling the sscanf function, which allows remote a (no CVSS)
- [CVE-2006-0470](https://cve.now/CVE-2006-0470.md): Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-0471](https://cve.now/CVE-2006-0471.md): Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in (no CVSS)
- [CVE-2006-0472](https://cve.now/CVE-2006-0472.md): Cross-site scripting (XSS) vulnerability in guestbook.php in my little homepage my little guestbook, as last modified in March 2004, allows (no CVSS)
- [CVE-2006-0473](https://cve.now/CVE-2006-0473.md): Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in Ap (no CVSS)
- [CVE-2006-0474](https://cve.now/CVE-2006-0474.md): Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via (1) a large packet length field, which c (no CVSS)
- [CVE-2006-0475](https://cve.now/CVE-2006-0475.md): PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service (ping flood) via a negative (no CVSS)
- [CVE-2006-0476](https://cve.now/CVE-2006-0476.md): Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (F (no CVSS)
- [CVE-2006-0477](https://cve.now/CVE-2006-0477.md): Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long sy (no CVSS)
- [CVE-2006-0478](https://cve.now/CVE-2006-0478.md): CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct reques (no CVSS)
- [CVE-2006-0479](https://cve.now/CVE-2006-0479.md): pmwiki.php in PmWiki 2.1 beta 20, with register\_globals enabled, allows remote attackers to bypass protection mechanisms that deregister glo (no CVSS)
- [CVE-2006-0480](https://cve.now/CVE-2006-0480.md): Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-0043](https://cve.now/CVE-2006-0043.md): Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arb (no CVSS)
- [CVE-2006-0467](https://cve.now/CVE-2006-0467.md): Unspecified vulnerability in Pioneers (formerly gnocatan) before 0.9.49 allows remote attackers to cause a denial of service (application cr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-01-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.