| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-0309 | 4.0 |
Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length.
|
19-10-2018 - 15:44 | 19-01-2006 - 01:03 | |
| CVE-2006-0366 | 4.3 |
Cross-site scripting (XSS) vulnerability in Phpclanwebsite (aka PCW) allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a BBCode img tag. A simple fix has been released on the Main PCW site available directly at <a
|
19-10-2018 - 15:44 | 22-01-2006 - 20:03 | |
| CVE-2006-0095 | 2.1 |
dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key.
|
19-10-2018 - 15:42 | 06-01-2006 - 11:03 | |
| CVE-2006-0096 | 7.2 |
wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requ
|
03-10-2018 - 21:34 | 06-01-2006 - 11:03 | |
| CVE-2014-3624 | 7.5 |
Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.
|
17-11-2017 - 18:20 | 30-10-2017 - 14:29 | |
| CVE-2006-6643 | 5.0 |
Fightersoft Multimedia Star FTP server 1.10 allows remote attackers to cause a denial of service (crash) via multiple RETR commands with long arguments.
|
19-10-2017 - 01:29 | 20-12-2006 - 02:28 | |
| CVE-2006-0338 | 5.0 |
Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to h
|
20-07-2017 - 01:29 | 21-01-2006 - 00:03 | |
| CVE-2006-0349 | 7.5 |
SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php.
|
20-07-2017 - 01:29 | 21-01-2006 - 01:03 | |
| CVE-2006-0364 | 4.3 |
Cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric c
|
20-07-2017 - 01:29 | 22-01-2006 - 20:03 | |
| CVE-2006-0345 | 7.5 |
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058.
|
20-07-2017 - 01:29 | 21-01-2006 - 01:03 | |
| CVE-2006-0337 | 7.5 |
Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allows r
|
20-07-2017 - 01:29 | 21-01-2006 - 00:03 | |
| CVE-2006-0346 | 4.3 |
Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php.
|
20-07-2017 - 01:29 | 21-01-2006 - 01:03 | |
| CVE-2006-0340 | 7.1 |
Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service (device hang an
|
20-07-2017 - 01:29 | 21-01-2006 - 00:03 | |
| CVE-2006-0350 | 4.3 |
Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php.
|
20-07-2017 - 01:29 | 21-01-2006 - 01:03 | |
| CVE-2006-0373 | 4.3 |
Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained so
|
05-09-2008 - 20:59 | 22-01-2006 - 20:03 | |
| CVE-2000-0686 | 5.0 |
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the fromfile parameter.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 | |
| CVE-2000-0687 | 10.0 |
Auction Weaver CGI script 1.03 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack in the catdir parameter.
|
05-09-2008 - 20:21 | 20-10-2000 - 04:00 |