# CVEs published 2006-10-17

34 CVEs were published on October 17, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5173](https://cve.now/CVE-2006-5173.md): Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows lo (no CVSS)
- [CVE-2006-4819](https://cve.now/CVE-2006-4819.md): Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link addres (no CVSS)
- [CVE-2006-5327](https://cve.now/CVE-2006-5327.md): Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products (no CVSS)
- [CVE-2006-5328](https://cve.now/CVE-2006-5328.md): OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrar (no CVSS)
- [CVE-2006-5330](https://cve.now/CVE-2006-5330.md): CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 f (no CVSS)
- [CVE-2006-4342](https://cve.now/CVE-2006-4342.md): The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running (no CVSS)
- [CVE-2006-5313](https://cve.now/CVE-2006-5313.md): Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRL (no CVSS)
- [CVE-2006-5314](https://cve.now/CVE-2006-5314.md): PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2006-5315](https://cve.now/CVE-2006-5315.md): PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in (no CVSS)
- [CVE-2006-5316](https://cve.now/CVE-2006-5316.md): registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dat (no CVSS)
- [CVE-2006-5317](https://cve.now/CVE-2006-5317.md): PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the content (no CVSS)
- [CVE-2006-5318](https://cve.now/CVE-2006-5318.md): PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-5319](https://cve.now/CVE-2006-5319.md): Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-5320](https://cve.now/CVE-2006-5320.md): Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img para (no CVSS)
- [CVE-2006-5321](https://cve.now/CVE-2006-5321.md): Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2006-5322](https://cve.now/CVE-2006-5322.md): Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vec (no CVSS)
- [CVE-2006-5323](https://cve.now/CVE-2006-5323.md): Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possib (no CVSS)
- [CVE-2006-5324](https://cve.now/CVE-2006-5324.md): The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspeci (no CVSS)
- [CVE-2006-5325](https://cve.now/CVE-2006-5325.md): Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers t (no CVSS)
- [CVE-2006-5326](https://cve.now/CVE-2006-5326.md): PHP remote file inclusion vulnerability in language/lang/lang\_contact\_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allo (no CVSS)
- [CVE-2006-5309](https://cve.now/CVE-2006-5309.md): PHP remote file inclusion vulnerability in language/lang\_french/lang\_prillian\_faq.php in the Prillian French 0.8.0 and earlier module for ph (no CVSS)
- [CVE-2006-5310](https://cve.now/CVE-2006-5310.md): PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyC (no CVSS)
- [CVE-2006-5311](https://cve.now/CVE-2006-5311.md): PHP remote file inclusion vulnerability in includes/archive/archive\_topic.php in Buzlas 2006-1 Full allows remote attackers to execute arbit (no CVSS)
- [CVE-2006-5312](https://cve.now/CVE-2006-5312.md): PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to e (no CVSS)
- [CVE-2006-5299](https://cve.now/CVE-2006-5299.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Gcontact 0.6.5 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-5300](https://cve.now/CVE-2006-5300.md): Unspecified vulnerability in HP Version Control Agent before 2.1.5 allows remote authenticated users to obtain "unauthorized access" to a re (no CVSS)
- [CVE-2006-5301](https://cve.now/CVE-2006-5301.md): PHP remote file inclusion vulnerability in includes/antispam.php in the SpamBlockerMODv 1.0.2 and earlier module for phpBB allows remote att (no CVSS)
- [CVE-2006-5302](https://cve.now/CVE-2006-5302.md): Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2006-5303](https://cve.now/CVE-2006-5303.md): Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and sig (no CVSS)
- [CVE-2006-5304](https://cve.now/CVE-2006-5304.md): PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2006-5305](https://cve.now/CVE-2006-5305.md): PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbi (no CVSS)
- [CVE-2006-5306](https://cve.now/CVE-2006-5306.md): Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to (no CVSS)
- [CVE-2006-5307](https://cve.now/CVE-2006-5307.md): Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2006-5308](https://cve.now/CVE-2006-5308.md): Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers to execute arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-10-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.