# CVEs published 2006-11-08 31 CVEs were published on November 8, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-5809](https://cve.now/CVE-2006-5809.md): Multiple unspecified vulnerabilities in Jonathon J. (no CVSS) - [CVE-2006-5810](https://cve.now/CVE-2006-5810.md): Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2006-5811](https://cve.now/CVE-2006-5811.md): PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register\_globals enabled, allows remote attack (no CVSS) - [CVE-2006-5812](https://cve.now/CVE-2006-5812.md): Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vd\_kms4.pm, a "Kerio MailSer (no CVSS) - [CVE-2006-5813](https://cve.now/CVE-2006-5813.md): Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vd\_novell3.pm, a "Novel (no CVSS) - [CVE-2006-5814](https://cve.now/CVE-2006-5814.md): Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vd\_novell.pm, a "Novell (no CVSS) - [CVE-2006-5815](https://cve.now/CVE-2006-5815.md): Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause (no CVSS) - [CVE-2006-5816](https://cve.now/CVE-2006-5816.md): Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote attackers to execute a (no CVSS) - [CVE-2006-5817](https://cve.now/CVE-2006-5817.md): prl\_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library/Parallels/.dhcpd\_configuration, which allows (no CVSS) - [CVE-2006-5818](https://cve.now/CVE-2006-5818.md): Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and (no CVSS) - [CVE-2006-5463](https://cve.now/CVE-2006-5463.md): Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers (no CVSS) - [CVE-2006-5805](https://cve.now/CVE-2006-5805.md): Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to (no CVSS) - [CVE-2006-5806](https://cve.now/CVE-2006-5806.md): SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensiti (no CVSS) - [CVE-2006-5807](https://cve.now/CVE-2006-5807.md): Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications (no CVSS) - [CVE-2006-5808](https://cve.now/CVE-2006-5808.md): The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD direct (no CVSS) - [CVE-2006-4810](https://cve.now/CVE-2006-4810.md): Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earli (no CVSS) - [CVE-2006-5462](https://cve.now/CVE-2006-5462.md): Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and Sea (no CVSS) - [CVE-2006-5464](https://cve.now/CVE-2006-5464.md): Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey befor (no CVSS) - [CVE-2006-5747](https://cve.now/CVE-2006-5747.md): Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers (no CVSS) - [CVE-2006-5748](https://cve.now/CVE-2006-5748.md): Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey b (no CVSS) - [CVE-2006-5794](https://cve.now/CVE-2006-5794.md): Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has (no CVSS) - [CVE-2006-5795](https://cve.now/CVE-2006-5795.md): Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register\_globals is enabled, allow remote attackers to (no CVSS) - [CVE-2006-5796](https://cve.now/CVE-2006-5796.md): Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register\_globals is enabled, allow re (no CVSS) - [CVE-2006-5797](https://cve.now/CVE-2006-5797.md): Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-5798](https://cve.now/CVE-2006-5798.md): SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL commands via the contid par (no CVSS) - [CVE-2006-5799](https://cve.now/CVE-2006-5799.md): Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web scrip (no CVSS) - [CVE-2006-5800](https://cve.now/CVE-2006-5800.md): Cross-site scripting (XSS) vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-5801](https://cve.now/CVE-2006-5801.md): The owserver module in owfs and owhttpd 2.5p5 and earlier does not properly check the path type, which allows attackers to cause a denial of (no CVSS) - [CVE-2006-5802](https://cve.now/CVE-2006-5802.md): SQL injection vulnerability in message\_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attackers to execute arbit (no CVSS) - [CVE-2006-5803](https://cve.now/CVE-2006-5803.md): PHP remote file inclusion vulnerability in modules/mx\_smartor/album.php in the mxBB Smartor Album module 1.02 and earlier allows remote atta (no CVSS) - [CVE-2006-5804](https://cve.now/CVE-2006-5804.md): PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary PHP code via a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.