# CVEs published 2006-04-27 19 CVEs were published on April 27, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-2079](https://cve.now/CVE-2006-2079.md): Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attac (no CVSS) - [CVE-2006-2080](https://cve.now/CVE-2006-2080.md): SQL injection vulnerability in portfolio\_photo\_popup.php in Verosky Media Instant Photo Gallery 1.0.2 allows remote attackers to execute arb (no CVSS) - [CVE-2006-2081](https://cve.now/CVE-2006-2081.md): Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via the GET\_DOMAIN\_INDEX\_METADATA function in the D (no CVSS) - [CVE-2006-2072](https://cve.now/CVE-2006-2072.md): Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service (no CVSS) - [CVE-2006-2073](https://cve.now/CVE-2006-2073.md): Unspecified vulnerability in ISC BIND allows remote attackers to cause a denial of service via a crafted DNS message with a "broken" TSIG, a (no CVSS) - [CVE-2006-2074](https://cve.now/CVE-2006-2074.md): Unspecified vulnerability in Juniper Networks JUNOSe E-series routers before 7-1-1 has unknown impact and remote attack vectors related to t (no CVSS) - [CVE-2006-2075](https://cve.now/CVE-2006-2075.md): Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via a crafted DNS message, aka "Query-of-death (no CVSS) - [CVE-2006-2076](https://cve.now/CVE-2006-2076.md): Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumption) via a DNS query wi (no CVSS) - [CVE-2006-2077](https://cve.now/CVE-2006-2077.md): Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact and attack vectors. (no CVSS) - [CVE-2006-2078](https://cve.now/CVE-2006-2078.md): Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remot (no CVSS) - [CVE-2006-2071](https://cve.now/CVE-2006-2071.md): Linux kernel 2.4.x and 2.6.x up to 2.6.16 allows local users to bypass IPC permissions and modify a readonly attachment of shared memory by (no CVSS) - [CVE-2006-1514](https://cve.now/CVE-2006-1514.md): Multiple buffer overflows in the abcmidi-yaps translator in abcmidi 20050101, and other versions, allow remote attackers to execute arbitrar (no CVSS) - [CVE-2006-2064](https://cve.now/CVE-2006-2064.md): Unspecified vulnerability in the libpkcs11 library in Sun Solaris 10 might allow local users to gain privileges or cause a denial of service (no CVSS) - [CVE-2006-2065](https://cve.now/CVE-2006-2065.md): SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the s (no CVSS) - [CVE-2006-2066](https://cve.now/CVE-2006-2066.md): Multiple cross-site scripting (XSS) vulnerabilities pm\_popup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, (no CVSS) - [CVE-2006-2067](https://cve.now/CVE-2006-2067.md): SQL injection vulnerability in vb\_board\_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to (no CVSS) - [CVE-2006-2068](https://cve.now/CVE-2006-2068.md): Unspecified vulnerability in Hitachi JP1 products allow remote attackers to cause a denial of service (application stop or fail) via unexpec (no CVSS) - [CVE-2006-2069](https://cve.now/CVE-2006-2069.md): The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets. (no CVSS) - [CVE-2006-2070](https://cve.now/CVE-2006-2070.md): Cross-site scripting (XSS) vulnerability in member.php in DevBB 1.0.0 and earlier allows remote attackers to inject arbitrary web script or (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-04-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.