# CVEs published 2006-09-26 20 CVEs were published on September 26, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5000](https://cve.now/CVE-2006-5000.md): Multiple buffer overflows in WS\_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, have unknown impact and remote aut (no CVSS) - [CVE-2006-5001](https://cve.now/CVE-2006-5001.md): Unspecified vulnerability in the log analyzer in WS\_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certa (no CVSS) - [CVE-2006-4172](https://cve.now/CVE-2006-4172.md): Integer overflow vulnerability in the i386\_set\_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cau (no CVSS) - [CVE-2006-4178](https://cve.now/CVE-2006-4178.md): Integer signedness error in the i386\_set\_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a d (no CVSS) - [CVE-2006-4981](https://cve.now/CVE-2006-4981.md): Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC addre (no CVSS) - [CVE-2006-4982](https://cve.now/CVE-2006-4982.md): Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attac (no CVSS) - [CVE-2006-4983](https://cve.now/CVE-2006-4983.md): Cisco NAC allows quarantined devices to communicate over the network with (1) DNS, (2) DHCP, and (3) EAPoUDP, which allows attackers to bypa (no CVSS) - [CVE-2006-4984](https://cve.now/CVE-2006-4984.md): Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL (no CVSS) - [CVE-2006-4985](https://cve.now/CVE-2006-4985.md): Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-4986](https://cve.now/CVE-2006-4986.md): Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/co (no CVSS) - [CVE-2006-4987](https://cve.now/CVE-2006-4987.md): Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a (no CVSS) - [CVE-2006-4988](https://cve.now/CVE-2006-4988.md): Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2006-4989](https://cve.now/CVE-2006-4989.md): Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbnail.php, (2) functions (no CVSS) - [CVE-2006-4990](https://cve.now/CVE-2006-4990.md): Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PP\_PAT (no CVSS) - [CVE-2006-4991](https://cve.now/CVE-2006-4991.md): RSA Keon Certificate Authority (KeonCA) Manager 6.5.1 and 6.6 allows privileged local users to hide malicious Certificate Authority (CA) act (no CVSS) - [CVE-2006-4992](https://cve.now/CVE-2006-4992.md): Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com\_jd-wp) 2.0-1.0 RC2 allow remote attackers to execute arb (no CVSS) - [CVE-2006-4993](https://cve.now/CVE-2006-4993.md): Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2006-4994](https://cve.now/CVE-2006-4994.md): Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicio (no CVSS) - [CVE-2006-4995](https://cve.now/CVE-2006-4995.md): PHP remote file inclusion vulnerability in BSQ Sitestats (bsq\_sitestats) before 2.1.1 for Joomla! allows remote attackers to execute arbitra (no CVSS) - [CVE-2006-4996](https://cve.now/CVE-2006-4996.md): Unspecified vulnerability in JoomlaLib (com\_joomlalib) before 1.2.2 for Joomla! allows remote attackers to have an unknown impact, related t (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-09-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.