# CVEs published 2006-03-23

23 CVEs were published on March 23, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2922](https://cve.now/CVE-2005-2922.md): Heap-based buffer overflow in the embedded player in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, (no CVSS)
- [CVE-2006-0323](https://cve.now/CVE-2006-0323.md): Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and H (no CVSS)
- [CVE-2006-1365](https://cve.now/CVE-2006-1365.md): The Motorola PEBL U6, the Motorola V600, and possibly the Motorola E398 and other Motorola phones allow remote attackers to add an entry for (no CVSS)
- [CVE-2006-1366](https://cve.now/CVE-2006-1366.md): Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial o (no CVSS)
- [CVE-2006-1367](https://cve.now/CVE-2006-1367.md): The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairi (no CVSS)
- [CVE-2006-1368](https://cve.now/CVE-2006-1368.md): Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2006-1369](https://cve.now/CVE-2006-1369.md): Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject a (no CVSS)
- [CVE-2006-1370](https://cve.now/CVE-2006-1370.md): Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPl (no CVSS)
- [CVE-2006-1371](https://cve.now/CVE-2006-1371.md): Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to u (no CVSS)
- [CVE-2006-1283](https://cve.now/CVE-2006-1283.md): opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin funct (no CVSS)
- [CVE-2000-1240](https://cve.now/CVE-2000-1240.md): Unspecified vulnerability in siteman.php3 in AnyPortal(php) before 22 APR 00 allows remote attackers to obtain sensitive information via unk (no CVSS)
- [CVE-2003-1298](https://cve.now/CVE-2003-1298.md): Multiple directory traversal vulnerabilities in siteman.php3 in AnyPortal(php) 12 MAY 00 allow remote attackers to (1) create, (2) delete, ( (no CVSS)
- [CVE-2006-0050](https://cve.now/CVE-2006-0050.md): snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file. (no CVSS)
- [CVE-2006-0905](https://cve.now/CVE-2006-0905.md): A "programming error" in fast\_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence n (no CVSS)
- [CVE-2006-0997](https://cve.now/CVE-2006-0997.md): The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, (no CVSS)
- [CVE-2006-0998](https://cve.now/CVE-2006-0998.md): The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher inst (no CVSS)
- [CVE-2006-0999](https://cve.now/CVE-2006-0999.md): The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server (no CVSS)
- [CVE-2006-1360](https://cve.now/CVE-2006-1360.md): Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) t (no CVSS)
- [CVE-2006-1361](https://cve.now/CVE-2006-1361.md): Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the usern (no CVSS)
- [CVE-2006-1362](https://cve.now/CVE-2006-1362.md): Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-1363](https://cve.now/CVE-2006-1363.md): images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uplo (no CVSS)
- [CVE-2006-1364](https://cve.now/CVE-2006-1364.md): Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, (no CVSS)
- [CVE-2006-1359](https://cve.now/CVE-2006-1359.md): Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a ce (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-03-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.