# CVEs published 2006-12-19

8 CVEs were published on December 19, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6636](https://cve.now/CVE-2006-6636.md): Unspecified vulnerability in the Utility Classes for IBM WebSphere Application Server (WAS) before 5.1.1.13 and 6.x before 6.0.2.17 has unkn (no CVSS)
- [CVE-2006-6637](https://cve.now/CVE-2006-6637.md): The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled (no CVSS)
- [CVE-2006-6638](https://cve.now/CVE-2006-6638.md): IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer d (no CVSS)
- [CVE-2006-6639](https://cve.now/CVE-2006-6639.md): Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified vectors related to executing (no CVSS)
- [CVE-2006-6640](https://cve.now/CVE-2006-6640.md): Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2006-3896](https://cve.now/CVE-2006-3896.md): The NeoScale Systems CryptoStor 700 series appliance before 2.6 relies on client-side ActiveX code for smartcard authentication, which allow (no CVSS)
- [CVE-2006-6106](https://cve.now/CVE-2006-6106.md): Multiple buffer overflows in the cmtp\_recv\_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.2 (no CVSS)
- [CVE-2006-6605](https://cve.now/CVE-2006-6605.md): Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterpr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.