# CVEs published 2006-11-28 32 CVEs were published on November 28, 2006: 0 critical, 0 high. Days are UTC. - [CVE-2006-4518](https://cve.now/CVE-2006-4518.md): Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a DNS request with a self-referenc (no CVSS) - [CVE-2006-6113](https://cve.now/CVE-2006-6113.md): Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to (1) include/admin\_auth.inc.php and (2) in (no CVSS) - [CVE-2006-6145](https://cve.now/CVE-2006-6145.md): CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\\installvariables.properties, which has insecu (no CVSS) - [CVE-2006-6146](https://cve.now/CVE-2006-6146.md): Buffer overflow in the HPDF\_Page\_Circle function in hpdf\_page\_operator.c in Takeshi Kanno Haru Free PDF Library (libharu2, aka libharu) 2.0. (no CVSS) - [CVE-2006-6147](https://cve.now/CVE-2006-6147.md): Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID pa (no CVSS) - [CVE-2006-6148](https://cve.now/CVE-2006-6148.md): Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2006-6149](https://cve.now/CVE-2006-6149.md): SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID para (no CVSS) - [CVE-2006-6150](https://cve.now/CVE-2006-6150.md): PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2006-6151](https://cve.now/CVE-2006-6151.md): PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to execute arbitrary PHP c (no CVSS) - [CVE-2006-6152](https://cve.now/CVE-2006-6152.md): Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2006-6153](https://cve.now/CVE-2006-6153.md): Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web scrip (no CVSS) - [CVE-2006-6154](https://cve.now/CVE-2006-6154.md): PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to e (no CVSS) - [CVE-2006-6155](https://cve.now/CVE-2006-6155.md): Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allow remote attackers to e (no CVSS) - [CVE-2006-6156](https://cve.now/CVE-2006-6156.md): Cross-site scripting (XSS) vulnerability in auth/message.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attacker (no CVSS) - [CVE-2006-6157](https://cve.now/CVE-2006-6157.md): SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL commands via the pa (no CVSS) - [CVE-2006-6158](https://cve.now/CVE-2006-6158.md): Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) (no CVSS) - [CVE-2006-6159](https://cve.now/CVE-2006-6159.md): Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary w (no CVSS) - [CVE-2006-6160](https://cve.now/CVE-2006-6160.md): SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary S (no CVSS) - [CVE-2006-6161](https://cve.now/CVE-2006-6161.md): Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to execute arbitrary SQL co (no CVSS) - [CVE-2006-4181](https://cve.now/CVE-2006-4181.md): Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers (no CVSS) - [CVE-2006-6135](https://cve.now/CVE-2006-6135.md): Multiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) have unknown impact and attack ve (no CVSS) - [CVE-2006-6136](https://cve.now/CVE-2006-6136.md): IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "re (no CVSS) - [CVE-2006-6137](https://cve.now/CVE-2006-6137.md): Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS) - [CVE-2006-6138](https://cve.now/CVE-2006-6138.md): Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute (no CVSS) - [CVE-2006-6139](https://cve.now/CVE-2006-6139.md): Directory traversal vulnerability in downloadexcel.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via (no CVSS) - [CVE-2006-6140](https://cve.now/CVE-2006-6140.md): PHP remote file inclusion vulnerability in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS) - [CVE-2006-6141](https://cve.now/CVE-2006-6141.md): Buffer overflow in Tftpd32 3.01 allows remote attackers to cause a denial of service via a long GET or PUT request, which is not properly ha (no CVSS) - [CVE-2006-6130](https://cve.now/CVE-2006-6130.md): Apple Mac OS X AppleTalk allows local users to cause a denial of service (kernel panic) by calling the AIOCREGLOCALZN ioctl command with a c (no CVSS) - [CVE-2006-6131](https://cve.now/CVE-2006-6131.md): Untrusted search path vulnerability in (1) WSAdminServer and (2) WSWebServer in Kerio WebSTAR (4D WebSTAR Server Suite) 5.4.2 and earlier al (no CVSS) - [CVE-2006-6132](https://cve.now/CVE-2006-6132.md): Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via (1) the search eng (no CVSS) - [CVE-2006-6133](https://cve.now/CVE-2006-6133.md): Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and (no CVSS) - [CVE-2006-6134](https://cve.now/CVE-2006-6134.md): Heap-based buffer overflow in the WMCheckURLScheme function in WMVCORE.DLL in Microsoft Windows Media Player (WMP) 10.00.00.4036 on Windows (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2006-11-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.