# CVEs published 2006-03-13

10 CVEs were published on March 13, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1194](https://cve.now/CVE-2006-1194.md): Integer signedness error in the enet\_protocol\_handle\_incoming\_commands function in protocol.c for ENet library CVS version Jul 2005 and earl (no CVSS)
- [CVE-2006-1195](https://cve.now/CVE-2006-1195.md): The enet\_protocol\_handle\_send\_fragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products includi (no CVSS)
- [CVE-2006-1196](https://cve.now/CVE-2006-1196.md): Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2006-1197](https://cve.now/CVE-2006-1197.md): SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by cha (no CVSS)
- [CVE-2006-0049](https://cve.now/CVE-2006-0049.md): gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data pack (no CVSS)
- [CVE-2005-3526](https://cve.now/CVE-2005-3526.md): Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrar (no CVSS)
- [CVE-2006-0819](https://cve.now/CVE-2006-0819.md): Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL charac (no CVSS)
- [CVE-2006-0820](https://cve.now/CVE-2006-0820.md): Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspe (no CVSS)
- [CVE-2006-0950](https://cve.now/CVE-2006-0950.md): unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename. (no CVSS)
- [CVE-2006-1183](https://cve.now/CVE-2006-1183.md): The Ubuntu 5.10 installer does not properly clear passwords from the installer log file (questions.dat), and leaves the log file with world- (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.