# CVEs published 2006-12-10

57 CVEs were published on December 10, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6444](https://cve.now/CVE-2006-6444.md): Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2006-6445](https://cve.now/CVE-2006-6445.md): Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary loca (no CVSS)
- [CVE-2006-6446](https://cve.now/CVE-2006-6446.md): SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic\_quotes\_gpc is disabled, allows remote attackers to execute (no CVSS)
- [CVE-2006-6447](https://cve.now/CVE-2006-6447.md): Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2006-6448](https://cve.now/CVE-2006-6448.md): Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the use (no CVSS)
- [CVE-2006-6449](https://cve.now/CVE-2006-6449.md): Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers (no CVSS)
- [CVE-2006-6450](https://cve.now/CVE-2006-6450.md): Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote (no CVSS)
- [CVE-2006-6451](https://cve.now/CVE-2006-6451.md): Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2006-6452](https://cve.now/CVE-2006-6452.md): Multiple cross-site scripting (XSS) vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject (no CVSS)
- [CVE-2006-6453](https://cve.now/CVE-2006-6453.md): PHP remote file inclusion vulnerability in JOWAMP\_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated users to execute arb (no CVSS)
- [CVE-2006-6454](https://cve.now/CVE-2006-6454.md): execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacter (no CVSS)
- [CVE-2006-6455](https://cve.now/CVE-2006-6455.md): Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow r (no CVSS)
- [CVE-2006-6383](https://cve.now/CVE-2006-6383.md): PHP 5.2.0 and 4.4 allows local users to bypass safe\_mode and open\_basedir restrictions via a malicious path and a null byte before a ";" in (no CVSS)
- [CVE-2006-6443](https://cve.now/CVE-2006-6443.md): Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in Novell Client 4.91 has (no CVSS)
- [CVE-2006-6379](https://cve.now/CVE-2006-6379.md): Buffer overflow in the BrightStor Backup Discovery Service in multiple CA products, including ARCserve Backup r11.5 SP1 and earlier, ARCserv (no CVSS)
- [CVE-2000-1242](https://cve.now/CVE-2000-1242.md): The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain s (no CVSS)
- [CVE-2006-6332](https://cve.now/CVE-2006-6332.md): Stack-based buffer overflow in net80211/ieee80211\_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2006-6413](https://cve.now/CVE-2006-6413.md): Cross-site scripting (XSS) vulnerability in Amateras sns 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2006-6414](https://cve.now/CVE-2006-6414.md): Multiple SQL injection vulnerabilities in dettaglio.asp in dol storye allow remote attackers to execute arbitrary SQL commands via the (1) i (no CVSS)
- [CVE-2006-6415](https://cve.now/CVE-2006-6415.md): PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2006-6416](https://cve.now/CVE-2006-6416.md): Multiple PHP remote file inclusion vulnerabilities in PhpLeague - Univert PhpLeague 0.81 allow remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2006-6417](https://cve.now/CVE-2006-6417.md): PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to (no CVSS)
- [CVE-2006-6418](https://cve.now/CVE-2006-6418.md): Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root (no CVSS)
- [CVE-2006-6419](https://cve.now/CVE-2006-6419.md): jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com\_jce) allows remote a (no CVSS)
- [CVE-2006-6420](https://cve.now/CVE-2006-6420.md): Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 b (no CVSS)
- [CVE-2006-6421](https://cve.now/CVE-2006-6421.md): Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated (no CVSS)
- [CVE-2006-6422](https://cve.now/CVE-2006-6422.md): Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the app (no CVSS)
- [CVE-2006-6426](https://cve.now/CVE-2006-6426.md): PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register\_globals is enabled, all (no CVSS)
- [CVE-2006-6427](https://cve.now/CVE-2006-6427.md): The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 (no CVSS)
- [CVE-2006-6428](https://cve.now/CVE-2006-6428.md): Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allow remote attackers to (no CVSS)
- [CVE-2006-6429](https://cve.now/CVE-2006-6429.md): Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modif (no CVSS)
- [CVE-2006-6430](https://cve.now/CVE-2006-6430.md): Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not re (no CVSS)
- [CVE-2006-6431](https://cve.now/CVE-2006-6431.md): Unspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17. (no CVSS)
- [CVE-2006-6432](https://cve.now/CVE-2006-6432.md): Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17. (no CVSS)
- [CVE-2006-6433](https://cve.now/CVE-2006-6433.md): Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate (no CVSS)
- [CVE-2006-6434](https://cve.now/CVE-2006-6434.md): Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, (no CVSS)
- [CVE-2006-6435](https://cve.now/CVE-2006-6435.md): The SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.00 (no CVSS)
- [CVE-2006-6436](https://cve.now/CVE-2006-6436.md): Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before (no CVSS)
- [CVE-2006-6437](https://cve.now/CVE-2006-6437.md): ops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows attack (no CVSS)
- [CVE-2006-6438](https://cve.now/CVE-2006-6438.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user dat (no CVSS)
- [CVE-2006-6439](https://cve.now/CVE-2006-6439.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers t (no CVSS)
- [CVE-2006-6440](https://cve.now/CVE-2006-6440.md): Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before (no CVSS)
- [CVE-2006-6441](https://cve.now/CVE-2006-6441.md): Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to byp (no CVSS)
- [CVE-2006-6442](https://cve.now/CVE-2006-6442.md): Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in (no CVSS)
- [CVE-2006-5874](https://cve.now/CVE-2006-5874.md): Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME at (no CVSS)
- [CVE-2006-6221](https://cve.now/CVE-2006-6221.md): 2X ThinClientServer Enterprise Edition before 4.0.2248 allows remote attackers to create multiple privileged accounts via a replay attack us (no CVSS)
- [CVE-2006-6400](https://cve.now/CVE-2006-6400.md): Buffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004, Ichitaro 2005, Ichitaro Lite2, Ichitaro viewer 4. (no CVSS)
- [CVE-2006-6401](https://cve.now/CVE-2006-6401.md): Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2006-6402](https://cve.now/CVE-2006-6402.md): SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the de (no CVSS)
- [CVE-2006-6403](https://cve.now/CVE-2006-6403.md): mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via (1) details and (2) by array parameters (no CVSS)
- [CVE-2006-6405](https://cve.now/CVE-2006-6405.md): BitDefender Mail Protection for SMB 2.0 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encode (no CVSS)
- [CVE-2006-6406](https://cve.now/CVE-2006-6406.md): Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content (no CVSS)
- [CVE-2006-6407](https://cve.now/CVE-2006-6407.md): F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote attackers to bypass virus detection by inserting invalid characters into bas (no CVSS)
- [CVE-2006-6408](https://cve.now/CVE-2006-6408.md): Kaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into ba (no CVSS)
- [CVE-2006-6409](https://cve.now/CVE-2006-6409.md): F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly b (no CVSS)
- [CVE-2006-6410](https://cve.now/CVE-2006-6410.md): Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initia (no CVSS)
- [CVE-2006-6411](https://cve.now/CVE-2006-6411.md): PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service (crash) via a TCP SYN sca (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.