# CVEs published 2006-02-09 19 CVEs were published on February 9, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0627](https://cve.now/CVE-2006-0627.md): Cross-site scripting (XSS) vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-0625](https://cve.now/CVE-2006-0625.md): Directory traversal vulnerability in Spip\_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via (no CVSS) - [CVE-2006-0626](https://cve.now/CVE-2006-0626.md): SQL injection vulnerability in spip\_acces\_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2006-0613](https://cve.now/CVE-2006-0613.md): Unspecified vulnerability in Java Web Start after 1.0.1\_02, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain priv (no CVSS) - [CVE-2006-0614](https://cve.now/CVE-2006-0614.md): Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1\_16 and 1.4.x through 1.4.2\_08 al (no CVSS) - [CVE-2006-0615](https://cve.now/CVE-2006-0615.md): Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2\_09 allow remote attac (no CVSS) - [CVE-2006-0616](https://cve.now/CVE-2006-0616.md): Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtai (no CVSS) - [CVE-2006-0617](https://cve.now/CVE-2006-0617.md): Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security (no CVSS) - [CVE-2006-0618](https://cve.now/CVE-2006-0618.md): Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifie (no CVSS) - [CVE-2006-0619](https://cve.now/CVE-2006-0619.md): Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABL (no CVSS) - [CVE-2006-0620](https://cve.now/CVE-2006-0620.md): Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT (no CVSS) - [CVE-2006-0621](https://cve.now/CVE-2006-0621.md): Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (no CVSS) - [CVE-2006-0622](https://cve.now/CVE-2006-0622.md): QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break \*0xb032d59f" command to gdb. (no CVSS) - [CVE-2006-0623](https://cve.now/CVE-2006-0623.md): QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute ar (no CVSS) - [CVE-2006-0624](https://cve.now/CVE-2006-0624.md): SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2005-1528](https://cve.now/CVE-2005-1528.md): Untrusted search path vulnerability in the crttrap command in QNX Neutrino RTOS 6.2.1 allows local users to load arbitrary libraries via a L (no CVSS) - [CVE-2006-0610](https://cve.now/CVE-2006-0610.md): Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc\_magic\_quotes disabled, allow remote attackers to execute arb (no CVSS) - [CVE-2006-0611](https://cve.now/CVE-2006-0611.md): Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to ar (no CVSS) - [CVE-2006-0612](https://cve.now/CVE-2006-0612.md): Powersave daemon before 0.10.15.2 allows local users to gain privileges (unauthorized access to an X session) via unspecified vectors. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-02-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.