# CVEs published 2006-11-07 23 CVEs were published on November 7, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5783](https://cve.now/CVE-2006-5783.md): Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service (crash) via a long URL in an A tag. (no CVSS) - [CVE-2006-5784](https://cve.now/CVE-2006-5784.md): Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attacke (no CVSS) - [CVE-2006-5785](https://cve.now/CVE-2006-5785.md): Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a de (no CVSS) - [CVE-2006-5786](https://cve.now/CVE-2006-5786.md): Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary (no CVSS) - [CVE-2006-5787](https://cve.now/CVE-2006-5787.md): admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct req (no CVSS) - [CVE-2006-5788](https://cve.now/CVE-2006-5788.md): PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to (no CVSS) - [CVE-2006-5789](https://cve.now/CVE-2006-5789.md): War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strin (no CVSS) - [CVE-2006-5790](https://cve.now/CVE-2006-5790.md): Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and (no CVSS) - [CVE-2006-5791](https://cve.now/CVE-2006-5791.md): Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or (no CVSS) - [CVE-2006-5792](https://cve.now/CVE-2006-5792.md): Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified vectors, as demonst (no CVSS) - [CVE-2006-5651](https://cve.now/CVE-2006-5651.md): list.php in DigiOz Guestbook before 1.7.1 allows remote attackers to obtain sensitive information via a non-numeric page parameter, which di (no CVSS) - [CVE-2006-5781](https://cve.now/CVE-2006-5781.md): Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS re (no CVSS) - [CVE-2006-5650](https://cve.now/CVE-2006-5650.md): The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via t (no CVSS) - [CVE-2006-5778](https://cve.now/CVE-2006-5778.md): ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended a (no CVSS) - [CVE-2006-5779](https://cve.now/CVE-2006-5779.md): OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, w (no CVSS) - [CVE-2006-5780](https://cve.now/CVE-2006-5780.md): Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP pac (no CVSS) - [CVE-2006-4572](https://cve.now/CVE-2006-4572.md): ip6\_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a p (no CVSS) - [CVE-2006-4806](https://cve.now/CVE-2006-4806.md): Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrar (no CVSS) - [CVE-2006-4807](https://cve.now/CVE-2006-4807.md): loader\_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) (no CVSS) - [CVE-2006-4808](https://cve.now/CVE-2006-4808.md): Heap-based buffer overflow in loader\_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cau (no CVSS) - [CVE-2006-4809](https://cve.now/CVE-2006-4809.md): Stack-based buffer overflow in loader\_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to ca (no CVSS) - [CVE-2006-5776](https://cve.now/CVE-2006-5776.md): Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) (no CVSS) - [CVE-2006-5777](https://cve.now/CVE-2006-5777.md): Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.