# CVEs published 2006-02-10 20 CVEs were published on February 10, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0645](https://cve.now/CVE-2006-0645.md): Tiny ASN.1 Library (libtasn1) before 0.2.18, as used by (1) GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and (2) GNU Shishi, allows at (no CVSS) - [CVE-2005-4710](https://cve.now/CVE-2005-4710.md): Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to "g (no CVSS) - [CVE-2005-4711](https://cve.now/CVE-2005-4711.md): SQL injection vulnerability in Neocrome Land Down Under (LDU) 801 allows remote attackers to execute arbitrary SQL commands via an HTTP Refe (no CVSS) - [CVE-2006-0628](https://cve.now/CVE-2006-0628.md): myquiz.pl in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not p (no CVSS) - [CVE-2006-0629](https://cve.now/CVE-2006-0629.md): Unspecified vulnerability in AOL Instant Messenger (AIM) 5.9.3861 allows user-assisted remote attackers to cause a denial of service (client (no CVSS) - [CVE-2006-0630](https://cve.now/CVE-2006-0630.md): RITLabs The Bat! before 3.0.0.15 displays certain important headers from encapsulated data in message/partial MIME messages, instead of the (no CVSS) - [CVE-2006-0631](https://cve.now/CVE-2006-0631.md): CRLF injection vulnerability in mailback.pl in Erik C. (no CVSS) - [CVE-2006-0632](https://cve.now/CVE-2006-0632.md): The gen\_rand\_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation I (no CVSS) - [CVE-2006-0633](https://cve.now/CVE-2006-0633.md): The make\_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds t (no CVSS) - [CVE-2006-0634](https://cve.now/CVE-2006-0634.md): Borland C++Builder 6 (BCB6) with Update Pack 4 Enterprise edition (ent\_upd4) evaluates the "i\>sizeof(int)" expression to false when i equals (no CVSS) - [CVE-2006-0635](https://cve.now/CVE-2006-0635.md): Tiny C Compiler (TCC) 0.9.23 (aka TinyCC) evaluates the "i\>sizeof(int)" expression to false when i equals -1, which might introduce integer (no CVSS) - [CVE-2006-0636](https://cve.now/CVE-2006-0636.md): desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the \_SESSION variable before calling the session\_start function, which all (no CVSS) - [CVE-2006-0637](https://cve.now/CVE-2006-0637.md): Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command wi (no CVSS) - [CVE-2006-0638](https://cve.now/CVE-2006-0638.md): SQL injection vulnerability in moderation.php in MyBB (aka MyBulletinBoard) 1.0.3 allows remote authenticated users, with certain privileges (no CVSS) - [CVE-2006-0639](https://cve.now/CVE-2006-0639.md): Cross-site scripting (XSS) vulnerability in search.php in MyBB (aka MyBulletinBoard) 1.0.2 allows remote attackers with knowledge of the tab (no CVSS) - [CVE-2006-0640](https://cve.now/CVE-2006-0640.md): Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permiss (no CVSS) - [CVE-2006-0641](https://cve.now/CVE-2006-0641.md): Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does (no CVSS) - [CVE-2006-0642](https://cve.now/CVE-2006-0642.md): Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configurati (no CVSS) - [CVE-2006-0643](https://cve.now/CVE-2006-0643.md): Cross-site scripting (XSS) vulnerability in WiredRed e/pop Web Conferencing 4.1.0.755 allows remote authenticated users to inject arbitrary (no CVSS) - [CVE-2006-0644](https://cve.now/CVE-2006-0644.md): Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS (aka CPG Dragonfly CMS) 9.0.6.1 allow remote attackers (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-02-10 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.