# CVEs published 2006-03-12

13 CVEs were published on March 12, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-0557](https://cve.now/CVE-2006-0557.md): sys\_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for (no CVSS)
- [CVE-2006-1159](https://cve.now/CVE-2006-1159.md): Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of service (server crash) an (no CVSS)
- [CVE-2006-1160](https://cve.now/CVE-2006-1160.md): Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1161](https://cve.now/CVE-2006-1161.md): Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execute arbitrary code by (no CVSS)
- [CVE-2006-1162](https://cve.now/CVE-2006-1162.md): Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. (no CVSS)
- [CVE-2006-1163](https://cve.now/CVE-2006-1163.md): Cross-site scripting (XSS) vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op paramete (no CVSS)
- [CVE-2006-1164](https://cve.now/CVE-2006-1164.md): Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which a (no CVSS)
- [CVE-2006-1165](https://cve.now/CVE-2006-1165.md): Cross-site scripting (XSS) vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2006-1166](https://cve.now/CVE-2006-1166.md): Monotone 0.25 and earlier, when a user creates a file in a directory called "mt", and when checking out that file on a case-insensitive file (no CVSS)
- [CVE-2006-1155](https://cve.now/CVE-2006-1155.md): Cross-site scripting (XSS) vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbi (no CVSS)
- [CVE-2006-1156](https://cve.now/CVE-2006-1156.md): SQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2006-1157](https://cve.now/CVE-2006-1157.md): Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1158](https://cve.now/CVE-2006-1158.md): Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service (application crash) via a crafted IMAP LOGIN comm (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.