# CVEs published 2006-05-26

13 CVEs were published on May 26, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2660](https://cve.now/CVE-2004-2660.md): Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via cert (no CVSS)
- [CVE-2003-1301](https://cve.now/CVE-2003-1301.md): Sun Java Runtime Environment (JRE) 1.x before 1.4.2\_11 and 1.5.x before 1.5.0\_06, and as used in multiple web browsers, allows remote attack (no CVSS)
- [CVE-2006-2608](https://cve.now/CVE-2006-2608.md): artmedic newsletter 4.1 and possibly other versions, when register\_globals is enabled, allows remote attackers to modify arbitrary files and (no CVSS)
- [CVE-2006-2609](https://cve.now/CVE-2006-2609.md): artmedic newsletter 4.1.2 and possibly other versions, when register\_globals is enabled, allows remote attackers to modify arbitrary files a (no CVSS)
- [CVE-2006-2610](https://cve.now/CVE-2006-2610.md): Cross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2006-2611](https://cve.now/CVE-2006-2611.md): Cross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in MediaWiki 1.6.x before r14349 allows remote at (no CVSS)
- [CVE-2006-2612](https://cve.now/CVE-2006-2612.md): Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with (no CVSS)
- [CVE-2006-2613](https://cve.now/CVE-2006-2613.md): Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other (no CVSS)
- [CVE-2006-2614](https://cve.now/CVE-2006-2614.md): Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd\_jobs\_db.sh (no CVSS)
- [CVE-2006-2615](https://cve.now/CVE-2006-2615.md): ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter. (no CVSS)
- [CVE-2006-2616](https://cve.now/CVE-2006-2616.md): SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows r (no CVSS)
- [CVE-2006-2617](https://cve.now/CVE-2006-2617.md): (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via (no CVSS)
- [CVE-2006-2618](https://cve.now/CVE-2006-2618.md): Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-05-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.