# CVEs published 2006-03-22 19 CVEs were published on March 22, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-0038](https://cve.now/CVE-2006-0038.md): Integer overflow in the do\_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, (no CVSS) - [CVE-2006-0058](https://cve.now/CVE-2006-0058.md): Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a (no CVSS) - [CVE-2005-4347](https://cve.now/CVE-2005-4347.md): The Linux 2.4 kernel patch in kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux does not correctly set the "chroot (no CVSS) - [CVE-2005-4418](https://cve.now/CVE-2005-4418.md): util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that t (no CVSS) - [CVE-2006-1353](https://cve.now/CVE-2006-1353.md): Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the d (no CVSS) - [CVE-2006-1354](https://cve.now/CVE-2006-1354.md): Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (ser (no CVSS) - [CVE-2006-1355](https://cve.now/CVE-2006-1355.md): avast! Antivirus 4.6.763 and earlier sets "BUILTIN\\Everyone" permissions to critical system files in the installation folder, which allows l (no CVSS) - [CVE-2006-1356](https://cve.now/CVE-2006-1356.md): Stack-based buffer overflow in the count\_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary co (no CVSS) - [CVE-2006-1357](https://cve.now/CVE-2006-1357.md): Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary we (no CVSS) - [CVE-2006-1358](https://cve.now/CVE-2006-1358.md): Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session (no CVSS) - [CVE-2006-1344](https://cve.now/CVE-2006-1344.md): Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitra (no CVSS) - [CVE-2006-1345](https://cve.now/CVE-2006-1345.md): polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option\[\]=nul (no CVSS) - [CVE-2006-1346](https://cve.now/CVE-2006-1346.md): Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and exec (no CVSS) - [CVE-2006-1347](https://cve.now/CVE-2006-1347.md): SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQ (no CVSS) - [CVE-2006-1348](https://cve.now/CVE-2006-1348.md): Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrar (no CVSS) - [CVE-2006-1349](https://cve.now/CVE-2006-1349.md): Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2006-1350](https://cve.now/CVE-2006-1350.md): PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers t (no CVSS) - [CVE-2006-1351](https://cve.now/CVE-2006-1351.md): BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default int (no CVSS) - [CVE-2006-1352](https://cve.now/CVE-2006-1352.md): BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote atta (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-03-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.