# CVEs published 2006-12-26

23 CVEs were published on December 26, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6730](https://cve.now/CVE-2006-6730.md): OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with ro (no CVSS)
- [CVE-2006-6731](https://cve.now/CVE-2006-6731.md): Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Develop (no CVSS)
- [CVE-2006-6732](https://cve.now/CVE-2006-6732.md): PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2006-6733](https://cve.now/CVE-2006-6733.md): Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2006-6734](https://cve.now/CVE-2006-6734.md): Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote att (no CVSS)
- [CVE-2006-6735](https://cve.now/CVE-2006-6735.md): modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote attackers to obtain sensitive information via a (no CVSS)
- [CVE-2006-6736](https://cve.now/CVE-2006-6736.md): Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Develop (no CVSS)
- [CVE-2006-6737](https://cve.now/CVE-2006-6737.md): Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Develop (no CVSS)
- [CVE-2006-6738](https://cve.now/CVE-2006-6738.md): PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2006-6739](https://cve.now/CVE-2006-6739.md): PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2006-6740](https://cve.now/CVE-2006-6740.md): Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2006-6741](https://cve.now/CVE-2006-6741.md): Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administra (no CVSS)
- [CVE-2006-6742](https://cve.now/CVE-2006-6742.md): Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 or R.25.47, and HP Las (no CVSS)
- [CVE-2006-6743](https://cve.now/CVE-2006-6743.md): phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or de (no CVSS)
- [CVE-2006-6744](https://cve.now/CVE-2006-6744.md): phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image\_data, (2) graphics/comm, or (3) users read/write di (no CVSS)
- [CVE-2006-6745](https://cve.now/CVE-2006-6745.md): Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java (no CVSS)
- [CVE-2006-6724](https://cve.now/CVE-2006-6724.md): BolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to cause a denial of service (application cras (no CVSS)
- [CVE-2006-6725](https://cve.now/CVE-2006-6725.md): Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2006-6726](https://cve.now/CVE-2006-6726.md): PHP remote file inclusion vulnerability in inertianews\_main.php in inertianews 0.02 beta allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2006-6727](https://cve.now/CVE-2006-6727.md): PHP remote file inclusion vulnerability in inertianews\_class.php in inertianews 0.02 beta and earlier allows remote attackers to execute arb (no CVSS)
- [CVE-2006-6728](https://cve.now/CVE-2006-6728.md): Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2006-6729](https://cve.now/CVE-2006-6729.md): Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web script or HTML via unspe (no CVSS)
- [CVE-2006-6723](https://cve.now/CVE-2006-6723.md): The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) v (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.