# CVEs published 2006-02-04

24 CVEs were published on February 4, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0552](https://cve.now/CVE-2006-0552.md): Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecifie (no CVSS)
- [CVE-2003-1293](https://cve.now/CVE-2003-1293.md): Multiple cross-site scripting (XSS) vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2005-3188](https://cve.now/CVE-2005-3188.md): Buffer overflow in Nullsoft Winamp 5.094 allows remote attackers to execute arbitrary code via (1) an m3u file containing a long line ending (no CVSS)
- [CVE-2006-0539](https://cve.now/CVE-2006-0539.md): The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux (no CVSS)
- [CVE-2006-0540](https://cve.now/CVE-2006-0540.md): Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrary SQL commands via un (no CVSS)
- [CVE-2006-0541](https://cve.now/CVE-2006-0541.md): Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2006-0542](https://cve.now/CVE-2006-0542.md): Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-0543](https://cve.now/CVE-2006-0543.md): Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encode (no CVSS)
- [CVE-2006-0544](https://cve.now/CVE-2006-0544.md): urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application cras (no CVSS)
- [CVE-2006-0545](https://cve.now/CVE-2006-0545.md): SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to ex (no CVSS)
- [CVE-2006-0546](https://cve.now/CVE-2006-0546.md): Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attac (no CVSS)
- [CVE-2006-0547](https://cve.now/CVE-2006-0547.md): Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypa (no CVSS)
- [CVE-2006-0548](https://cve.now/CVE-2006-0548.md): SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers (no CVSS)
- [CVE-2006-0549](https://cve.now/CVE-2006-0549.md): SQL injection vulnerability in the SYS.DBMS\_METADATA\_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote (no CVSS)
- [CVE-2006-0550](https://cve.now/CVE-2006-0550.md): Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service. (no CVSS)
- [CVE-2006-0551](https://cve.now/CVE-2006-0551.md): SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execut (no CVSS)
- [CVE-2006-0531](https://cve.now/CVE-2006-0531.md): Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top (no CVSS)
- [CVE-2006-0532](https://cve.now/CVE-2006-0532.md): Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-0533](https://cve.now/CVE-2006-0533.md): Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-0534](https://cve.now/CVE-2006-0534.md): Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitra (no CVSS)
- [CVE-2006-0535](https://cve.now/CVE-2006-0535.md): Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2006-0536](https://cve.now/CVE-2006-0536.md): Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-0537](https://cve.now/CVE-2006-0537.md): Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2006-0538](https://cve.now/CVE-2006-0538.md): CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly C (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.