# CVEs published 2006-10-09 25 CVEs were published on October 9, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-3741](https://cve.now/CVE-2006-3741.md): The perfmonctl system call (sys\_perfmonctl) in Linux kernel 2.4.x and 2.6 before 2.6.18, when running on Itanium systems, does not properly (no CVSS) - [CVE-2006-4997](https://cve.now/CVE-2006-4997.md): The clip\_mkip function in net/atm/clip.c of the ATM subsystem in Linux kernel allows remote attackers to cause a denial of service (panic) v (no CVSS) - [CVE-2006-5218](https://cve.now/CVE-2006-5218.md): Integer overflow in the systrace\_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a den (no CVSS) - [CVE-2006-5219](https://cve.now/CVE-2006-5219.md): SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands v (no CVSS) - [CVE-2006-5220](https://cve.now/CVE-2006-5220.md): Multiple PHP remote file inclusion vulnerabilities in WebYep 1.1.9, when register\_globals is enabled, allow remote attackers to execute arbi (no CVSS) - [CVE-2005-4813](https://cve.now/CVE-2005-4813.md): Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, (no CVSS) - [CVE-2006-5211](https://cve.now/CVE-2006-5211.md): Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 (no CVSS) - [CVE-2006-5212](https://cve.now/CVE-2006-5212.md): Trend Micro OfficeScan 6.0 in Client/Server/Messaging (CSM) Suite for SMB 2.0 before 6.0.0.1385, and OfficeScan Corporate Edition (OSCE) 6.5 (no CVSS) - [CVE-2006-5213](https://cve.now/CVE-2006-5213.md): Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by c (no CVSS) - [CVE-2006-5214](https://cve.now/CVE-2006-5214.md): Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 th (no CVSS) - [CVE-2006-5215](https://cve.now/CVE-2006-5215.md): The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20 (no CVSS) - [CVE-2006-5216](https://cve.now/CVE-2006-5216.md): Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI. (no CVSS) - [CVE-2006-5217](https://cve.now/CVE-2006-5217.md): SQL injection vulnerability in giris\_yap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously (no CVSS) - [CVE-2006-5203](https://cve.now/CVE-2006-5203.md): Invision Power Board (IPB) 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbi (no CVSS) - [CVE-2006-5204](https://cve.now/CVE-2006-5204.md): Cross-site scripting (XSS) vulnerability in action\_admin/member.php in Invision Power Board (IPB) 2.1.7 and earlier allows remote authentica (no CVSS) - [CVE-2006-5205](https://cve.now/CVE-2006-5205.md): Directory traversal vulnerability in Invision Gallery 2.0.7 allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2006-5206](https://cve.now/CVE-2006-5206.md): SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in ( (no CVSS) - [CVE-2006-5207](https://cve.now/CVE-2006-5207.md): PHP remote file inclusion vulnerability in images/smileys/smileys\_packs.php in phpMyTeam 2.0, when register\_globals is enabled, allows remot (no CVSS) - [CVE-2006-5208](https://cve.now/CVE-2006-5208.md): Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via (1) the catid\_sea (no CVSS) - [CVE-2006-5209](https://cve.now/CVE-2006-5209.md): PHP remote file inclusion vulnerability in admin/admin\_topic\_action\_logging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used (no CVSS) - [CVE-2003-1306](https://cve.now/CVE-2003-1306.md): Microsoft URLScan 2.5, with the RemoveServerHeader option enabled, allows remote attackers to obtain sensitive information (server name and (no CVSS) - [CVE-2006-4812](https://cve.now/CVE-2006-4812.md): Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserializ (no CVSS) - [CVE-2006-5201](https://cve.now/CVE-2006-5201.md): Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2\_12, and SD (no CVSS) - [CVE-2006-5202](https://cve.now/CVE-2006-5202.md): Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbit (no CVSS) - [CVE-2006-4980](https://cve.now/CVE-2006-4980.md): Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of servi (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-10-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.