# CVEs published 2006-04-12

14 CVEs were published on April 12, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1523](https://cve.now/CVE-2006-1523.md): The \_\_group\_complete\_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown (no CVSS)
- [CVE-2006-1743](https://cve.now/CVE-2006-1743.md): Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) nom or (no CVSS)
- [CVE-2006-1744](https://cve.now/CVE-2006-1744.md): Buffer overflow in pl\_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is u (no CVSS)
- [CVE-2006-1745](https://cve.now/CVE-2006-1745.md): Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-1746](https://cve.now/CVE-2006-1746.md): Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS (no CVSS)
- [CVE-2006-1747](https://cve.now/CVE-2006-1747.md): PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the v (no CVSS)
- [CVE-2006-1748](https://cve.now/CVE-2006-1748.md): Cross-site scripting (XSS) vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Fl (no CVSS)
- [CVE-2006-1749](https://cve.now/CVE-2006-1749.md): PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2006-1750](https://cve.now/CVE-2006-1750.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Autogallery 0.41 allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-1751](https://cve.now/CVE-2006-1751.md): Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors. (no CVSS)
- [CVE-2006-1752](https://cve.now/CVE-2006-1752.md): Multiple cross-site scripting (XSS) vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2006-0003](https://cve.now/CVE-2006-0003.md): Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsof (no CVSS)
- [CVE-2006-0012](https://cve.now/CVE-2006-0012.md): Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to (no CVSS)
- [CVE-2006-0014](https://cve.now/CVE-2006-0014.md): Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.