# CVEs published 2006-07-19

46 CVEs were published on July 19, 2006: 0 critical, 1 high. Days are UTC.

- [CVE-2006-3589](https://cve.now/CVE-2006-3589.md): vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, w (no CVSS)
- [CVE-2006-3729](https://cve.now/CVE-2006-3729.md): DataSourceControl in Internet Explorer 6 on Windows XP SP2 with Office installed allows remote attackers to cause a denial of service (crash (no CVSS)
- [CVE-2006-3730](https://cve.now/CVE-2006-3730.md): Integer overflow in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) and execute (CVSS 8.8)
- [CVE-2006-3731](https://cve.now/CVE-2006-3731.md): Mozilla Firefox 1.5.0.4 and earlier allows remote user-assisted attackers to cause a denial of service (crash) via a form with a multipart/f (no CVSS)
- [CVE-2006-3732](https://cve.now/CVE-2006-3732.md): Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1 ships with an Oracle database that contains several default a (no CVSS)
- [CVE-2006-3733](https://cve.now/CVE-2006-3733.md): jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Resp (no CVSS)
- [CVE-2006-3734](https://cve.now/CVE-2006-3734.md): Multiple unspecified vulnerabilities in the Command Line Interface (CLI) for Cisco Security Monitoring, Analysis and Response System (CS-MAR (no CVSS)
- [CVE-2006-3735](https://cve.now/CVE-2006-3735.md): Multiple PHP remote file inclusion vulnerabilities in Mail2Forum (module for phpBB) 1.2 and earlier allow remote attackers to execute arbitr (no CVSS)
- [CVE-2006-3736](https://cve.now/CVE-2006-3736.md): PHP remote file inclusion vulnerability in core/videodb.class.xml.php in the VideoDB component for Mambo 0.3 and earlier allows remote attac (no CVSS)
- [CVE-2006-3737](https://cve.now/CVE-2006-3737.md): Cross-site scripting (XSS) vulnerability in filemanager/filemanager.php in the control panel in SWsoft Plesk 8.0 and earlier allows remote a (no CVSS)
- [CVE-2006-3725](https://cve.now/CVE-2006-3725.md): Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and Reg (no CVSS)
- [CVE-2006-3726](https://cve.now/CVE-2006-3726.md): Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary co (no CVSS)
- [CVE-2006-3727](https://cve.now/CVE-2006-3727.md): Multiple SQL injection vulnerabilities in Eskolar CMS 0.9.0.0 allow remote attackers to execute arbitrary SQL commands via the (1) gr\_1\_id, (no CVSS)
- [CVE-2006-3728](https://cve.now/CVE-2006-3728.md): Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and without patch 118833-11 (118855-08) allows (no CVSS)
- [CVE-2006-3698](https://cve.now/CVE-2006-3698.md): Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB01 for Chang (no CVSS)
- [CVE-2006-3699](https://cve.now/CVE-2006-3699.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 and 9.2.0.6 has unknown impact and attack vectors, aka Orac (no CVSS)
- [CVE-2006-3700](https://cve.now/CVE-2006-3700.md): Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB (no CVSS)
- [CVE-2006-3701](https://cve.now/CVE-2006-3701.md): Unspecified vulnerability in the Dictionary component in Oracle Database 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors (no CVSS)
- [CVE-2006-3702](https://cve.now/CVE-2006-3702.md): Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vec (no CVSS)
- [CVE-2006-3703](https://cve.now/CVE-2006-3703.md): Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle (no CVSS)
- [CVE-2006-3704](https://cve.now/CVE-2006-3704.md): Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10. (no CVSS)
- [CVE-2006-3705](https://cve.now/CVE-2006-3705.md): Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Stati (no CVSS)
- [CVE-2006-3706](https://cve.now/CVE-2006-3706.md): Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 has unknown impact and attack vectors, aka Oracle Vuln# AS01. (no CVSS)
- [CVE-2006-3707](https://cve.now/CVE-2006-3707.md): Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 and 9.0.3.1 has unknown impact and attack vectors, aka Oracle Vuln# (no CVSS)
- [CVE-2006-3708](https://cve.now/CVE-2006-3708.md): Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and a (no CVSS)
- [CVE-2006-3709](https://cve.now/CVE-2006-3709.md): Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 10.1.2.0.0 has unknown impact and attack vectors, aka (no CVSS)
- [CVE-2006-3710](https://cve.now/CVE-2006-3710.md): Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0 has unknown impact and attack vect (no CVSS)
- [CVE-2006-3711](https://cve.now/CVE-2006-3711.md): Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 9.0.4.1 has unknown impact and attack vectors, aka Ora (no CVSS)
- [CVE-2006-3712](https://cve.now/CVE-2006-3712.md): Unspecified vulnerability in OC4J for Oracle Application Server 9.0.4.2 and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vul (no CVSS)
- [CVE-2006-3713](https://cve.now/CVE-2006-3713.md): Unspecified vulnerability in OC4J for Oracle Application Server 10.1.3.0 has unknown impact and attack vectors, aka Oracle Vuln# AS09. (no CVSS)
- [CVE-2006-3714](https://cve.now/CVE-2006-3714.md): Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vu (no CVSS)
- [CVE-2006-3715](https://cve.now/CVE-2006-3715.md): Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln# OCS01. (no CVSS)
- [CVE-2006-3716](https://cve.now/CVE-2006-3716.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Orac (no CVSS)
- [CVE-2006-3717](https://cve.now/CVE-2006-3717.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle V (no CVSS)
- [CVE-2006-3718](https://cve.now/CVE-2006-3718.md): Multiple unspecified vulnerabilities in Oracle Exchange for Oracle E-Business Suite and Applications 6.2.4 have unknown impact and attack ve (no CVSS)
- [CVE-2006-3719](https://cve.now/CVE-2006-3719.md): Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka O (no CVSS)
- [CVE-2006-3720](https://cve.now/CVE-2006-3720.md): Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka (no CVSS)
- [CVE-2006-3721](https://cve.now/CVE-2006-3721.md): Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact an (no CVSS)
- [CVE-2006-3722](https://cve.now/CVE-2006-3722.md): Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bu (no CVSS)
- [CVE-2006-3723](https://cve.now/CVE-2006-3723.md): Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 a (no CVSS)
- [CVE-2006-3724](https://cve.now/CVE-2006-3724.md): Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attac (no CVSS)
- [CVE-2006-3693](https://cve.now/CVE-2006-3693.md): Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\\\`) in an argument to the (no CVSS)
- [CVE-2006-3694](https://cve.now/CVE-2006-3694.md): Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors invol (no CVSS)
- [CVE-2006-3695](https://cve.now/CVE-2006-3695.md): Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) (no CVSS, trac)
- [CVE-2006-3696](https://cve.now/CVE-2006-3696.md): filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) via long arguments to (no CVSS)
- [CVE-2006-3697](https://cve.now/CVE-2006-3697.md): Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-07-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.