# CVEs published 2006-11-03 30 CVEs were published on November 3, 2006: 1 critical, 0 high. Days are UTC. - [CVE-2006-5701](https://cve.now/CVE-2006-5701.md): Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows lo (no CVSS) - [CVE-2006-5679](https://cve.now/CVE-2006-5679.md): Integer overflow in the ffs\_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arb (no CVSS) - [CVE-2006-5677](https://cve.now/CVE-2006-5677.md): resmom/start\_exec.c in pbs\_mom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink att (no CVSS) - [CVE-2006-5678](https://cve.now/CVE-2006-5678.md): PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpM (CVSS 9.8) - [CVE-2006-5675](https://cve.now/CVE-2006-5675.md): Multiple unspecified vulnerabilities in Pentaho Business Intelligence (BI) Suite before 1.2 RC3 (1.2.0.470-RC3) have unknown impact and atta (no CVSS) - [CVE-2006-5676](https://cve.now/CVE-2006-5676.md): SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQ (no CVSS) - [CVE-2006-5663](https://cve.now/CVE-2006-5663.md): IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2.90 use insecure permission (no CVSS) - [CVE-2006-5664](https://cve.now/CVE-2006-5664.md): The installation script in IBM Informix Dynamic Server 10.00, Informix Client Software Development Kit (CSDK) 2.90, and Informix I-Connect 2 (no CVSS) - [CVE-2006-5665](https://cve.now/CVE-2006-5665.md): PHP remote file inclusion vulnerability in admin/modules\_data.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attac (no CVSS) - [CVE-2006-5666](https://cve.now/CVE-2006-5666.md): SQL injection vulnerability in includes/menu.inc.php in E-Annu 1.0 allows remote attackers to execute arbitrary SQL commands via the login p (no CVSS) - [CVE-2006-5667](https://cve.now/CVE-2006-5667.md): Multiple PHP remote file inclusion vulnerabilities in P-Book 1.17 and earlier allow remote attackers to execute arbitrary PHP code via a URL (no CVSS) - [CVE-2006-5668](https://cve.now/CVE-2006-5668.md): Unspecified vulnerability in Ampache 3.3.2 and earlier, when register\_globals is enabled, allows remote attackers to bypass security restric (no CVSS) - [CVE-2006-5669](https://cve.now/CVE-2006-5669.md): PHP remote file inclusion vulnerability in gestion/savebackup.php in Gepi 1.4.0 and earlier, and possibly other versions before 1.4.4, allow (no CVSS) - [CVE-2006-5670](https://cve.now/CVE-2006-5670.md): PHP remote file inclusion vulnerability in forgot\_pass.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrar (no CVSS) - [CVE-2006-5671](https://cve.now/CVE-2006-5671.md): PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PH (no CVSS) - [CVE-2006-5672](https://cve.now/CVE-2006-5672.md): PHP remote file inclusion vulnerability in web/init\_mysource.php in MySource CMS 2.16.2 and earlier allows remote attackers to execute arbit (no CVSS) - [CVE-2006-5673](https://cve.now/CVE-2006-5673.md): PHP remote file inclusion vulnerability in bb\_func\_txt.php in miniBB 2.0.2 and earlier, when register\_globals is enabled, allows remote atta (no CVSS) - [CVE-2006-5674](https://cve.now/CVE-2006-5674.md): Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when register\_globals is enabled, allow remote attackers to (no CVSS) - [CVE-2006-5397](https://cve.now/CVE-2006-5397.md): The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, (no CVSS) - [CVE-2006-5652](https://cve.now/CVE-2006-5652.md): Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web s (no CVSS) - [CVE-2006-5653](https://cve.now/CVE-2006-5653.md): Cross-site scripting (XSS) vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote (no CVSS) - [CVE-2006-5654](https://cve.now/CVE-2006-5654.md): Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 (no CVSS) - [CVE-2006-5655](https://cve.now/CVE-2006-5655.md): SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username para (no CVSS) - [CVE-2006-5656](https://cve.now/CVE-2006-5656.md): Memory leak in the push\_align function in src/util.c in Vilistextum before 2.6.9 allows remote attackers to cause a denial of service (memor (no CVSS) - [CVE-2006-5657](https://cve.now/CVE-2006-5657.md): Multiple off-by-one errors in src/text.c in Vilistextum before 2.6.9 have unknown impact and attack vectors. (no CVSS) - [CVE-2006-5658](https://cve.now/CVE-2006-5658.md): BlooMooWeb ActiveX control (AidemATL.dll) allows remote attackers to (1) download arbitrary files via a URL in the bstrUrl parameter to the (no CVSS) - [CVE-2006-5659](https://cve.now/CVE-2006-5659.md): PAM\_extern before 0.2 sends a password as a command line argument, which allows local users to obtain the password by listing the command li (no CVSS) - [CVE-2006-5660](https://cve.now/CVE-2006-5660.md): Cisco Security Agent Management Center (CSAMC) 5.1 before 5.1.0.79 does not properly handle certain LDAP error messages, which allows remote (no CVSS) - [CVE-2006-5661](https://cve.now/CVE-2006-5661.md): Cross-site scripting (XSS) vulnerability in nquser.php in VIRtech Netquery allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-5662](https://cve.now/CVE-2006-5662.md): SQL injection vulnerability in easy notesManager (eNM) 0.0.1 allows remote attackers to execute arbitrary SQL commands via (1) the username (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.