# CVEs published 2006-09-05

9 CVEs were published on September 5, 2006: 1 critical, 0 high. Days are UTC.

- [CVE-2006-4539](https://cve.now/CVE-2006-4539.md): (1) includes/widgets/module\_company\_tickets.php and (2) includes/widgets/module\_track\_tickets.php Client Support Center in Cerberus Helpdesk (no CVSS)
- [CVE-2006-4540](https://cve.now/CVE-2006-4540.md): Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-4541](https://cve.now/CVE-2006-4541.md): RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (cras (no CVSS)
- [CVE-2006-4542](https://cve.now/CVE-2006-4542.md): Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to co (no CVSS)
- [CVE-2006-4538](https://cve.now/CVE-2006-4538.md): Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malf (no CVSS)
- [CVE-2006-4536](https://cve.now/CVE-2006-4536.md): SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2006-4537](https://cve.now/CVE-2006-4537.md): NET$SESSION\_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successfu (no CVSS)
- [CVE-2006-4339](https://cve.now/CVE-2006-4339.md): Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypass (CVSS 9.1, Red Hat Enterprise Linux · Red Hat Network Satellite Ser… +2)
- [CVE-2006-4534](https://cve.now/CVE-2006-4534.md): Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-09-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.