# CVEs published 2006-04-20

78 CVEs were published on April 20, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2657](https://cve.now/CVE-2004-2657.md): Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local us (no CVSS)
- [CVE-2006-1941](https://cve.now/CVE-2006-1941.md): Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a crafted Clock Synchronisa (no CVSS)
- [CVE-2006-1942](https://cve.now/CVE-2006-1942.md): Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 allows user-assisted r (no CVSS)
- [CVE-2006-1943](https://cve.now/CVE-2006-1943.md): Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote attackers to inject arb (no CVSS)
- [CVE-2006-1944](https://cve.now/CVE-2006-1944.md): Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-1945](https://cve.now/CVE-2006-1945.md): Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1946](https://cve.now/CVE-2006-1946.md): Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1947](https://cve.now/CVE-2006-1947.md): Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2006-1948](https://cve.now/CVE-2006-1948.md): The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6.5 before 20060331 do (no CVSS)
- [CVE-2006-1949](https://cve.now/CVE-2006-1949.md): SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-1950](https://cve.now/CVE-2006-1950.md): Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject (no CVSS)
- [CVE-2006-1931](https://cve.now/CVE-2006-1931.md): The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) (no CVSS)
- [CVE-2006-1907](https://cve.now/CVE-2006-1907.md): Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the event\_id parameter to (no CVSS)
- [CVE-2006-1908](https://cve.now/CVE-2006-1908.md): Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the eve (no CVSS)
- [CVE-2006-1909](https://cve.now/CVE-2006-1909.md): Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot (no CVSS)
- [CVE-2006-1910](https://cve.now/CVE-2006-1910.md): config.php in S9Y Serendipity 1.0 beta 2 allows remote attackers to inject arbitrary PHP code by editing values that are stored in config.ph (no CVSS)
- [CVE-2006-1911](https://cve.now/CVE-2006-1911.md): Cross-site scripting (XSS) vulnerability in MyBB (MyBulletinBoard) 1.1 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2006-1912](https://cve.now/CVE-2006-1912.md): MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL\_GLOBAL variable in (1) global.php and (2) inc/init.php, which allows remote atta (no CVSS)
- [CVE-2006-1913](https://cve.now/CVE-2006-1913.md): Cross-site scripting (XSS) vulnerability in jax\_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2006-1914](https://cve.now/CVE-2006-1914.md): DbbS 2.0-alpha and earlier allows remote attackers to obtain sensitive information via an invalid (1) fcategoryid parameter to topics.php or (no CVSS)
- [CVE-2006-1915](https://cve.now/CVE-2006-1915.md): SQL injection vulnerability in topics.php in DbbS 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the fc (no CVSS)
- [CVE-2006-1916](https://cve.now/CVE-2006-1916.md): Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2006-1917](https://cve.now/CVE-2006-1917.md): SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-1918](https://cve.now/CVE-2006-1918.md): Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the men (no CVSS)
- [CVE-2006-1919](https://cve.now/CVE-2006-1919.md): PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2006-1920](https://cve.now/CVE-2006-1920.md): SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via the order parameter i (no CVSS)
- [CVE-2006-1921](https://cve.now/CVE-2006-1921.md): nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. (no CVSS)
- [CVE-2006-1922](https://cve.now/CVE-2006-1922.md): PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2006-1923](https://cve.now/CVE-2006-1923.md): Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-1924](https://cve.now/CVE-2006-1924.md): SQL injection vulnerability in functions/db\_api.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown ve (no CVSS)
- [CVE-2006-1925](https://cve.now/CVE-2006-1925.md): Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in CuteNews 1.4.1 allows remote attackers to read o (no CVSS)
- [CVE-2006-1926](https://cve.now/CVE-2006-1926.md): SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2006-1927](https://cve.now/CVE-2006-1927.md): Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 or Cisco 12000 series routers, allows rem (no CVSS)
- [CVE-2006-1928](https://cve.now/CVE-2006-1928.md): Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remote attackers to cause (no CVSS)
- [CVE-2006-1929](https://cve.now/CVE-2006-1929.md): PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-1930](https://cve.now/CVE-2006-1930.md): Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2006-1056](https://cve.now/CVE-2006-1056.md): The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, onl (no CVSS)
- [CVE-2006-1866](https://cve.now/CVE-2006-1866.md): Multiple unspecified vulnerabilities in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and other versions have unknown impact a (no CVSS)
- [CVE-2006-1867](https://cve.now/CVE-2006-1867.md): Unspecified vulnerability in Oracle Database Server 9.2.0.6 has unknown impact and attack vectors in the Advanced Replication component, aka (no CVSS)
- [CVE-2006-1868](https://cve.now/CVE-2006-1868.md): Buffer overflow in the Advanced Replication component in Oracle Database Server 10.1.0.4 allows database users to execute arbitrary code via (no CVSS)
- [CVE-2006-1869](https://cve.now/CVE-2006-1869.md): Unspecified vulnerability in Oracle Database Server 8.1.7.4 and 9.0.1.5 has unknown impact and attack vectors in the Dictionary component, a (no CVSS)
- [CVE-2006-1870](https://cve.now/CVE-2006-1870.md): Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors (no CVSS)
- [CVE-2006-1871](https://cve.now/CVE-2006-1871.md): SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-1872](https://cve.now/CVE-2006-1872.md): Unspecified vulnerability in Oracle Database Server 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors in the Oracle Enterprise Manag (no CVSS)
- [CVE-2006-1873](https://cve.now/CVE-2006-1873.md): Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spat (no CVSS)
- [CVE-2006-1874](https://cve.now/CVE-2006-1874.md): Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors in the Oracle Spatia (no CVSS)
- [CVE-2006-1875](https://cve.now/CVE-2006-1875.md): Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spati (no CVSS)
- [CVE-2006-1876](https://cve.now/CVE-2006-1876.md): Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial compone (no CVSS)
- [CVE-2006-1877](https://cve.now/CVE-2006-1877.md): Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatia (no CVSS)
- [CVE-2006-1878](https://cve.now/CVE-2006-1878.md): Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-1879](https://cve.now/CVE-2006-1879.md): Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 hav (no CVSS)
- [CVE-2006-1880](https://cve.now/CVE-2006-1880.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as ident (no CVSS)
- [CVE-2006-1881](https://cve.now/CVE-2006-1881.md): Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact (no CVSS)
- [CVE-2006-1882](https://cve.now/CVE-2006-1882.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identifi (no CVSS)
- [CVE-2006-1883](https://cve.now/CVE-2006-1883.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unkn (no CVSS)
- [CVE-2006-1884](https://cve.now/CVE-2006-1884.md): Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unkn (no CVSS)
- [CVE-2006-1885](https://cve.now/CVE-2006-1885.md): Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impa (no CVSS)
- [CVE-2006-1886](https://cve.now/CVE-2006-1886.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vec (no CVSS)
- [CVE-2006-1887](https://cve.now/CVE-2006-1887.md): Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln# JDE01. (no CVSS)
- [CVE-2006-1888](https://cve.now/CVE-2006-1888.md): phpGraphy 0.9.11 and earlier allows remote attackers to bypass authentication and gain administrator privileges via a direct request to inde (no CVSS)
- [CVE-2006-1889](https://cve.now/CVE-2006-1889.md): Cross-site scripting (XSS) vulnerability in the search action handler in index.php in Nils Asmussen (aka SCRIPTSOLUTION) Boardsolution 1.12 (no CVSS)
- [CVE-2006-1890](https://cve.now/CVE-2006-1890.md): Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2006-1891](https://cve.now/CVE-2006-1891.md): Cross-site scripting (XSS) vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2006-1892](https://cve.now/CVE-2006-1892.md): avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/\_avast4\_ temp (no CVSS)
- [CVE-2006-1893](https://cve.now/CVE-2006-1893.md): Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-1894](https://cve.now/CVE-2006-1894.md): Cross-site scripting (XSS) vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-1895](https://cve.now/CVE-2006-1895.md): Direct static code injection vulnerability in includes/template.php in phpBB allows remote authenticated users with write access to execute (no CVSS)
- [CVE-2006-1896](https://cve.now/CVE-2006-1896.md): Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via craf (no CVSS)
- [CVE-2006-1897](https://cve.now/CVE-2006-1897.md): Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain (no CVSS)
- [CVE-2006-1898](https://cve.now/CVE-2006-1898.md): Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2006-1899](https://cve.now/CVE-2006-1899.md): Multiple cross-site scripting (XSS) vulnerabilities in dev Neuron Blog 1.1 and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-1900](https://cve.now/CVE-2006-1900.md): Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote (no CVSS)
- [CVE-2006-1901](https://cve.now/CVE-2006-1901.md): Mozilla Camino 1.0 and earlier allow remote attackers to cause a denial of service (null dereference and application crash or hang) via HTML (no CVSS)
- [CVE-2006-1902](https://cve.now/CVE-2006-1902.md): fold\_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison (no CVSS)
- [CVE-2006-1903](https://cve.now/CVE-2006-1903.md): Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML (1) via (no CVSS)
- [CVE-2006-1904](https://cve.now/CVE-2006-1904.md): Cross-site scripting (XSS) vulnerability in index.php in AnimeGenesis Gallery allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2006-1905](https://cve.now/CVE-2006-1905.md): Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format stri (no CVSS)
- [CVE-2006-1906](https://cve.now/CVE-2006-1906.md): Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-04-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.