# CVEs published 2006-05-24 33 CVEs were published on May 24, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-2549](https://cve.now/CVE-2006-2549.md): Stack-based buffer overflow in PDF Form Filling and Flattening Tool before 3.1.0.12 allows remote attackers to cause a denial of service (cr (no CVSS) - [CVE-2006-2568](https://cve.now/CVE-2006-2568.md): PHP remote file inclusion vulnerability in addpost\_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allows remote attackers (no CVSS) - [CVE-2006-2569](https://cve.now/CVE-2006-2569.md): SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to (no CVSS) - [CVE-2006-2570](https://cve.now/CVE-2006-2570.md): PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GL (no CVSS) - [CVE-2006-2571](https://cve.now/CVE-2006-2571.md): Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitra (no CVSS, org.opencms:opencms-core) - [CVE-2006-2572](https://cve.now/CVE-2006-2572.md): Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the ( (no CVSS) - [CVE-2006-2573](https://cve.now/CVE-2006-2573.md): SQL injection vulnerability in index.php in DGBook 1.0, with magic\_quotes\_gpc disabled, allows remote attackers to execute arbitrary SQL com (no CVSS) - [CVE-2006-2574](https://cve.now/CVE-2006-2574.md): Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privi (no CVSS) - [CVE-2006-2575](https://cve.now/CVE-2006-2575.md): The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (crash) via a (no CVSS) - [CVE-2006-2576](https://cve.now/CVE-2006-2576.md): Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register\_globals is enabled, allow remote attackers to (no CVSS) - [CVE-2006-2577](https://cve.now/CVE-2006-2577.md): Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register\_globals is enabled, allow remote attackers to (no CVSS) - [CVE-2006-2578](https://cve.now/CVE-2006-2578.md): admin/cron.php in eSyndicat Directory 1.2, when register\_globals is enabled and magic\_quotes\_gpc is disabled, allows remote attackers to inc (no CVSS) - [CVE-2006-2579](https://cve.now/CVE-2006-2579.md): Unspecified vulnerability in HP OpenView Storage Data Protector 5.1 and 5.5 allows remote attackers to execute arbitrary code via unknown ve (no CVSS) - [CVE-2006-2580](https://cve.now/CVE-2006-2580.md): Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain (no CVSS) - [CVE-2006-2564](https://cve.now/CVE-2006-2564.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web scri (no CVSS) - [CVE-2006-2565](https://cve.now/CVE-2006-2565.md): SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via (1) the auth (no CVSS) - [CVE-2006-2566](https://cve.now/CVE-2006-2566.md): Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid (no CVSS) - [CVE-2006-2567](https://cve.now/CVE-2006-2567.md): Cross-site scripting (XSS) vulnerability in submit\_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbit (no CVSS) - [CVE-2006-1862](https://cve.now/CVE-2006-1862.md): The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service (panic) by running lsof a large numb (no CVSS) - [CVE-2006-2313](https://cve.now/CVE-2006-2313.md): PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent a (no CVSS) - [CVE-2006-2314](https://cve.now/CVE-2006-2314.md): PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent a (no CVSS) - [CVE-2006-1466](https://cve.now/CVE-2006-1466.md): Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects project (no CVSS) - [CVE-2006-2552](https://cve.now/CVE-2006-2552.md): Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks (no CVSS) - [CVE-2006-2553](https://cve.now/CVE-2006-2553.md): Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script vi (no CVSS) - [CVE-2006-2554](https://cve.now/CVE-2006-2554.md): Buffer overflow in the tell\_player\_surr\_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code v (no CVSS) - [CVE-2006-2555](https://cve.now/CVE-2006-2555.md): The parse\_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a command with a miss (no CVSS) - [CVE-2006-2556](https://cve.now/CVE-2006-2556.md): Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal (TRanx rebuilded), allows rem (no CVSS) - [CVE-2006-2557](https://cve.now/CVE-2006-2557.md): PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal (TRanx rebuilde (no CVSS) - [CVE-2006-2558](https://cve.now/CVE-2006-2558.md): Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the (no CVSS) - [CVE-2006-2559](https://cve.now/CVE-2006-2559.md): Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a U (no CVSS) - [CVE-2006-2560](https://cve.now/CVE-2006-2560.md): Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a U (no CVSS) - [CVE-2006-2561](https://cve.now/CVE-2006-2561.md): Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a m (no CVSS) - [CVE-2006-2562](https://cve.now/CVE-2006-2562.md): ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a mod (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-05-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.