# CVEs published 2006-04-05

15 CVEs were published on April 5, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1631](https://cve.now/CVE-2006-1631.md): Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers (no CVSS)
- [CVE-2006-1055](https://cve.now/CVE-2006-1055.md): The fill\_write\_buffer function in sysfs/file.c in Linux kernel 2.6.12 up to versions before 2.6.17-rc1 does not zero terminate a buffer when (no CVSS)
- [CVE-2006-0051](https://cve.now/CVE-2006-0051.md): Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via lo (no CVSS)
- [CVE-2006-0401](https://cve.now/CVE-2006-0401.md): Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypas (no CVSS)
- [CVE-2006-1616](https://cve.now/CVE-2006-1616.md): Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id paramet (no CVSS)
- [CVE-2006-1617](https://cve.now/CVE-2006-1617.md): Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-1618](https://cve.now/CVE-2006-1618.md): Format string vulnerability in the (1) Con\_message and (2) conPrintf functions in con\_main.c in Doomsday engine 1.8.6 allows remote attacker (no CVSS)
- [CVE-2006-1619](https://cve.now/CVE-2006-1619.md): IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP re (no CVSS)
- [CVE-2006-1620](https://cve.now/CVE-2006-1620.md): admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via a (no CVSS)
- [CVE-2006-1621](https://cve.now/CVE-2006-1621.md): Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to (no CVSS)
- [CVE-2006-1622](https://cve.now/CVE-2006-1622.md): Cross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via (1) the (no CVSS)
- [CVE-2006-1623](https://cve.now/CVE-2006-1623.md): Unspecified vulnerability in main.php in an unspecified "file created by Andries Bruinsma," possibly a FleXiBle Development (FXB) applicatio (no CVSS)
- [CVE-2006-1624](https://cve.now/CVE-2006-1624.md): The default configuration of syslogd in the Linux sysklogd package does not enable the -x (disable name lookups) option, which allows remote (no CVSS)
- [CVE-2006-1625](https://cve.now/CVE-2006-1625.md): Cross-site scripting (XSS) vulnerability in inc/functions\_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbi (no CVSS)
- [CVE-2006-1626](https://cve.now/CVE-2006-1626.md): Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.