# CVEs published 2006-10-18 71 CVEs were published on October 18, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5398](https://cve.now/CVE-2006-5398.md): SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid paramet (no CVSS) - [CVE-2006-5399](https://cve.now/CVE-2006-5399.md): PHP remote file inclusion vulnerability in classes/Import\_MM.class.php in PHPRecipeBook 2.36, when register\_globals is enabled, allows remot (no CVSS) - [CVE-2006-5400](https://cve.now/CVE-2006-5400.md): PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register\_globals is enabled, allows remote attackers to (no CVSS) - [CVE-2006-5401](https://cve.now/CVE-2006-5401.md): PHP remote file inclusion vulnerability in template/barnraiser\_01/p\_new\_password.tpl.php in AROUNDMe 0.5.2 and earlier allows remote attacke (no CVSS) - [CVE-2006-5402](https://cve.now/CVE-2006-5402.md): Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2005-2454](https://cve.now/CVE-2005-2454.md): IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the "Notes" folder and a (no CVSS) - [CVE-2006-5383](https://cve.now/CVE-2006-5383.md): SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ar (no CVSS) - [CVE-2006-5384](https://cve.now/CVE-2006-5384.md): PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows re (no CVSS) - [CVE-2006-5385](https://cve.now/CVE-2006-5385.md): PHP remote file inclusion vulnerability in admin/admin\_spam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to (no CVSS) - [CVE-2006-5386](https://cve.now/CVE-2006-5386.md): PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register\_globals is enabled, allows rem (no CVSS) - [CVE-2006-5387](https://cve.now/CVE-2006-5387.md): PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20\_272 and earlier phpBB module allows remote attac (no CVSS) - [CVE-2006-5388](https://cve.now/CVE-2006-5388.md): SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQL commands via the g (no CVSS) - [CVE-2006-5389](https://cve.now/CVE-2006-5389.md): tools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the path (no CVSS) - [CVE-2006-5390](https://cve.now/CVE-2006-5390.md): PHP remote file inclusion vulnerability in includes/functions\_mod\_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows r (no CVSS) - [CVE-2006-5391](https://cve.now/CVE-2006-5391.md): Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long string to UDP port 25777. (no CVSS) - [CVE-2006-5392](https://cve.now/CVE-2006-5392.md): Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-5393](https://cve.now/CVE-2006-5393.md): Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allo (CVSS 5.5) - [CVE-2006-5394](https://cve.now/CVE-2006-5394.md): The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box in Secure Desktop Settings, which might allo (no CVSS) - [CVE-2006-5395](https://cve.now/CVE-2006-5395.md): Buffer overflow in Microsoft Class Package Export Tool (aka clspack.exe) allows context-dependent attackers to execute arbitrary code via a (no CVSS) - [CVE-2006-5396](https://cve.now/CVE-2006-5396.md): The tcp\_fuse\_rcv\_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a deni (no CVSS) - [CVE-2006-4811](https://cve.now/CVE-2006-4811.md): Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possib (no CVSS) - [CVE-2006-5379](https://cve.now/CVE-2006-5379.md): The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on oth (no CVSS) - [CVE-2006-5380](https://cve.now/CVE-2006-5380.md): Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido\_path p (no CVSS) - [CVE-2006-5381](https://cve.now/CVE-2006-5381.md): Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database cr (no CVSS) - [CVE-2006-5332](https://cve.now/CVE-2006-5332.md): Unspecified vulnerability in xdb.dbms\_xdbz in the XMLDB component for Oracle Database 9.2.0.6 and 10.1.0.4 has unknown impact and remote aut (no CVSS) - [CVE-2006-5333](https://cve.now/CVE-2006-5333.md): Unspecified vulnerability in Oracle Spatial component in Oracle Database 10.2.0.2 has unknown impact and remote authenticated attack vectors (no CVSS) - [CVE-2006-5334](https://cve.now/CVE-2006-5334.md): Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and remote authen (no CVSS) - [CVE-2006-5335](https://cve.now/CVE-2006-5335.md): Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors re (no CVSS) - [CVE-2006-5336](https://cve.now/CVE-2006-5336.md): Multiple unspecified vulnerabilities in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and have unknown impac (no CVSS) - [CVE-2006-5337](https://cve.now/CVE-2006-5337.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 has unknown impact and rem (no CVSS) - [CVE-2006-5338](https://cve.now/CVE-2006-5338.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 10.1.0.5 has unknown impact and remote authenticated attack vectors (no CVSS) - [CVE-2006-5339](https://cve.now/CVE-2006-5339.md): Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remo (no CVSS) - [CVE-2006-5340](https://cve.now/CVE-2006-5340.md): Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have u (no CVSS) - [CVE-2006-5341](https://cve.now/CVE-2006-5341.md): Multiple unspecified vulnerabilities in XMLDB component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote au (no CVSS) - [CVE-2006-5342](https://cve.now/CVE-2006-5342.md): Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authen (no CVSS) - [CVE-2006-5343](https://cve.now/CVE-2006-5343.md): Unspecified vulnerability in Database Scheduler component in Oracle Database 10.1.0.3 has unknown impact and remote authenticated attack vec (no CVSS) - [CVE-2006-5344](https://cve.now/CVE-2006-5344.md): Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 have unknown imp (no CVSS) - [CVE-2006-5345](https://cve.now/CVE-2006-5345.md): Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authen (no CVSS) - [CVE-2006-5346](https://cve.now/CVE-2006-5346.md): Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, as used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite and Appli (no CVSS) - [CVE-2006-5347](https://cve.now/CVE-2006-5347.md): Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors (no CVSS) - [CVE-2006-5348](https://cve.now/CVE-2006-5348.md): Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11 (no CVSS) - [CVE-2006-5349](https://cve.now/CVE-2006-5349.md): Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related (no CVSS) - [CVE-2006-5350](https://cve.now/CVE-2006-5350.md): Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local (no CVSS) - [CVE-2006-5351](https://cve.now/CVE-2006-5351.md): Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote at (no CVSS) - [CVE-2006-5352](https://cve.now/CVE-2006-5352.md): Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln# (no CVSS) - [CVE-2006-5353](https://cve.now/CVE-2006-5353.md): Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and (no CVSS) - [CVE-2006-5354](https://cve.now/CVE-2006-5354.md): Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racl (no CVSS) - [CVE-2006-5355](https://cve.now/CVE-2006-5355.md): Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration (no CVSS) - [CVE-2006-5356](https://cve.now/CVE-2006-5356.md): Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Coll (no CVSS) - [CVE-2006-5357](https://cve.now/CVE-2006-5357.md): Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown im (no CVSS) - [CVE-2006-5358](https://cve.now/CVE-2006-5358.md): Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack (no CVSS) - [CVE-2006-5359](https://cve.now/CVE-2006-5359.md): Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E (no CVSS) - [CVE-2006-5360](https://cve.now/CVE-2006-5360.md): Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka V (no CVSS) - [CVE-2006-5361](https://cve.now/CVE-2006-5361.md): Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collabo (no CVSS) - [CVE-2006-5362](https://cve.now/CVE-2006-5362.md): Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote atta (no CVSS) - [CVE-2006-5363](https://cve.now/CVE-2006-5363.md): Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unkn (no CVSS) - [CVE-2006-5364](https://cve.now/CVE-2006-5364.md): Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Sui (no CVSS) - [CVE-2006-5365](https://cve.now/CVE-2006-5365.md): Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10 (no CVSS) - [CVE-2006-5366](https://cve.now/CVE-2006-5366.md): Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) Orac (no CVSS) - [CVE-2006-5367](https://cve.now/CVE-2006-5367.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack (no CVSS) - [CVE-2006-5368](https://cve.now/CVE-2006-5368.md): Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vu (no CVSS) - [CVE-2006-5369](https://cve.now/CVE-2006-5369.md): Unspecified vulnerability in Oracle Application Object Library in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote authentic (no CVSS) - [CVE-2006-5370](https://cve.now/CVE-2006-5370.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka (no CVSS) - [CVE-2006-5371](https://cve.now/CVE-2006-5371.md): Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated att (no CVSS) - [CVE-2006-5372](https://cve.now/CVE-2006-5372.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack (no CVSS) - [CVE-2006-5373](https://cve.now/CVE-2006-5373.md): Unspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1 has unknown impact and remote authenticated (no CVSS) - [CVE-2006-5374](https://cve.now/CVE-2006-5374.md): Unspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and remote authenticated attack vectors, aka Vuln# (no CVSS) - [CVE-2006-5375](https://cve.now/CVE-2006-5375.md): Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, a (no CVSS) - [CVE-2006-5376](https://cve.now/CVE-2006-5376.md): Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8 (no CVSS) - [CVE-2006-5377](https://cve.now/CVE-2006-5377.md): Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unkn (no CVSS) - [CVE-2006-5378](https://cve.now/CVE-2006-5378.md): Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23\_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-10-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.