# CVEs published 2006-08-23

24 CVEs were published on August 23, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4312](https://cve.now/CVE-2006-4312.md): Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to (no CVSS)
- [CVE-2006-4313](https://cve.now/CVE-2006-4313.md): Multiple unspecified vulnerabilities in Cisco VPN 3000 series concentrators before 4.1, 4.1.x up to 4.1(7)L, and 4.7.x up to 4.7(2)F allow a (no CVSS)
- [CVE-2006-4314](https://cve.now/CVE-2006-4314.md): The manager server in Symantec Enterprise Security Manager (ESM) 6 and 6.5.x allows remote attackers to cause a denial of service (hang) via (no CVSS)
- [CVE-2006-4315](https://cve.now/CVE-2006-4315.md): Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Ser (no CVSS)
- [CVE-2006-4316](https://cve.now/CVE-2006-4316.md): SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a proc (no CVSS)
- [CVE-2006-2932](https://cve.now/CVE-2006-2932.md): A regression error in the restore\_all code path of the 4/4GB split support for non-hugemem Linux kernels on Red Hat Linux Desktop and Enterp (no CVSS)
- [CVE-2006-3745](https://cve.now/CVE-2006-3745.md): Unspecified vulnerability in the sctp\_make\_abort\_user function in the SCTP implementation in Linux 2.6.x before 2.6.17.10 and 2.4.23 up to 2 (no CVSS)
- [CVE-2006-4306](https://cve.now/CVE-2006-4306.md): Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, i (no CVSS)
- [CVE-2006-4307](https://cve.now/CVE-2006-4307.md): Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unsp (no CVSS)
- [CVE-2006-4308](https://cve.now/CVE-2006-4308.md): Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6, Blackboard Learning and Community Portal Suite 6.2.3.23 (no CVSS)
- [CVE-2006-4309](https://cve.now/CVE-2006-4309.md): VNC server on the AK-Systems Windows Terminal 1.2.5 ExVLP is not password protected, which allows remote attackers to login and view RDP or (no CVSS)
- [CVE-2006-4310](https://cve.now/CVE-2006-4310.md): Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect (no CVSS)
- [CVE-2006-4311](https://cve.now/CVE-2006-4311.md): PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the fo (no CVSS)
- [CVE-2006-4262](https://cve.now/CVE-2006-4262.md): Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute (no CVSS)
- [CVE-2006-3869](https://cve.now/CVE-2006-3869.md): Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch b (no CVSS)
- [CVE-2006-4295](https://cve.now/CVE-2006-4295.md): Cross-site scripting (XSS) vulnerability in ascan\_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2006-4296](https://cve.now/CVE-2006-4296.md): PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component (com\_babackup) for Mambo 1.1 allows remote attackers t (no CVSS)
- [CVE-2006-4297](https://cve.now/CVE-2006-4297.md): SQL injection vulnerability in shopping\_cart.php in osCommerce before 2.2 Milestone 2 060817 allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2006-4298](https://cve.now/CVE-2006-4298.md): Multiple directory traversal vulnerabilities in cache.php in osCommerce before 2.2 Milestone 2 060817 allow remote attackers to determine ex (no CVSS)
- [CVE-2006-4299](https://cve.now/CVE-2006-4299.md): Cross-site scripting (XSS) vulnerability in tiki-searchindex.php in TikiWiki 1.9.4 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-4300](https://cve.now/CVE-2006-4300.md): SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2006-4301](https://cve.now/CVE-2006-4301.md): Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) via a long Color attribute in multiple Dire (no CVSS)
- [CVE-2006-4302](https://cve.now/CVE-2006-4302.md): The Java Plug-in J2SE 1.3.0\_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote a (no CVSS)
- [CVE-2006-4303](https://cve.now/CVE-2006-4303.md): Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service ("tight loo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.