# CVEs published 2006-10-27 28 CVEs were published on October 27, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-4805](https://cve.now/CVE-2006-4805.md): epan/dissectors/packet-xot.c in the XOT dissector (dissect\_xot\_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote atta (no CVSS) - [CVE-2006-5468](https://cve.now/CVE-2006-5468.md): Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (no CVSS) - [CVE-2006-5740](https://cve.now/CVE-2006-5740.md): Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (no CVSS) - [CVE-2006-5467](https://cve.now/CVE-2006-5467.md): The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP req (no CVSS) - [CVE-2006-5587](https://cve.now/CVE-2006-5587.md): Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers to execute arbitrary (no CVSS) - [CVE-2006-5588](https://cve.now/CVE-2006-5588.md): Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when register\_globals and magic\_quotes\_gpc are e (no CVSS) - [CVE-2006-5589](https://cve.now/CVE-2006-5589.md): Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via un (no CVSS) - [CVE-2006-5590](https://cve.now/CVE-2006-5590.md): PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to execute arbitrary PHP (no CVSS) - [CVE-2006-5591](https://cve.now/CVE-2006-5591.md): Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote attackers to execute arbitrary SQL command (no CVSS) - [CVE-2006-5592](https://cve.now/CVE-2006-5592.md): Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog cookie value to "xx". (no CVSS) - [CVE-2006-5593](https://cve.now/CVE-2006-5593.md): Buffer overflow in Desknet's (niokeru) before 5.0J R1.0 might allow remote authenticated users to execute arbitrary code via unspecified vec (no CVSS) - [CVE-2006-5594](https://cve.now/CVE-2006-5594.md): PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly earlier, allows remote attackers to execut (no CVSS) - [CVE-2006-5556](https://cve.now/CVE-2006-5556.md): Buffer overflow in the localtime\_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local (no CVSS) - [CVE-2006-5557](https://cve.now/CVE-2006-5557.md): Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users t (no CVSS) - [CVE-2006-5558](https://cve.now/CVE-2006-5558.md): Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code v (no CVSS) - [CVE-2006-5559](https://cve.now/CVE-2006-5559.md): The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Micros (no CVSS) - [CVE-2006-5560](https://cve.now/CVE-2006-5560.md): Cross-site scripting (XSS) vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-5561](https://cve.now/CVE-2006-5561.md): SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdb\_auth c (no CVSS) - [CVE-2006-5562](https://cve.now/CVE-2006-5562.md): PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote attackers to execute arb (no CVSS) - [CVE-2006-5563](https://cve.now/CVE-2006-5563.md): Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial of service (NULL deref (no CVSS) - [CVE-2006-5564](https://cve.now/CVE-2006-5564.md): Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-5565](https://cve.now/CVE-2006-5565.md): CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) (no CVSS) - [CVE-2006-5566](https://cve.now/CVE-2006-5566.md): CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP r (no CVSS) - [CVE-2006-5567](https://cve.now/CVE-2006-5567.md): Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a (no CVSS) - [CVE-2006-5568](https://cve.now/CVE-2006-5568.md): FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command. (no CVSS) - [CVE-2006-5569](https://cve.now/CVE-2006-5569.md): FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown ve (no CVSS) - [CVE-2006-5570](https://cve.now/CVE-2006-5570.md): Directory traversal vulnerability in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to read arbitrary files (no CVSS) - [CVE-2006-5571](https://cve.now/CVE-2006-5571.md): Stack-based buffer overflow in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to execute arbitrary code via (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-10-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.