| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2005-3359 | 4.9 |
The atm module in Linux kernel 2.6 before 2.6.14 allows local users to cause a denial of service (panic) via certain socket calls that produce inconsistent reference counts for loadable protocol modules.
|
13-02-2023 - 02:15 | 31-12-2005 - 05:00 | |
| CVE-2017-11844 | 4.3 |
Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information
|
23-05-2022 - 17:29 | 15-11-2017 - 03:29 | |
| CVE-2008-4211 | 10.0 |
Integer signedness error in (1) QuickLook in Apple Mac OS X 10.5.5 and (2) Office Viewer in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allows remote attackers to cause a denial of service (application termination) an
|
23-05-2021 - 00:52 | 10-10-2008 - 10:30 | |
| CVE-2016-5005 | 3.5 |
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin/addProxyConnector_commit.action.
|
16-04-2019 - 18:29 | 28-07-2016 - 16:59 | |
| CVE-2006-1274 | 7.2 |
Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to gain privileges via notepad.exe, which is used to display scan reports.
|
18-10-2018 - 16:31 | 19-03-2006 - 11:06 | |
| CVE-2006-1222 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.
|
18-10-2018 - 16:31 | 14-03-2006 - 11:02 | |
| CVE-2006-1241 | 4.6 |
Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilit
|
18-10-2018 - 16:31 | 15-03-2006 - 17:06 | |
| CVE-2006-1249 | 6.8 |
Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.
|
18-10-2018 - 16:31 | 19-03-2006 - 01:02 | |
| CVE-2006-1197 | 7.2 |
SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program.
|
18-10-2018 - 16:31 | 13-03-2006 - 22:02 | |
| CVE-2006-1230 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter. NOTE: the card_id vector
|
18-10-2018 - 16:31 | 14-03-2006 - 19:06 | |
| CVE-2006-1240 | 4.6 |
Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.
|
18-10-2018 - 16:31 | 15-03-2006 - 17:06 | |
| CVE-2006-1223 | 4.3 |
Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag.
|
18-10-2018 - 16:31 | 14-03-2006 - 11:02 | |
| CVE-2006-1233 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the (1) ArtCat parameter to wmview.php, (2) ctrrowcol parameter to footer.php, or (3) ArtID parameter to wmcomments.php.
|
18-10-2018 - 16:31 | 14-03-2006 - 19:06 | |
| CVE-2006-1020 | 7.5 |
SQL injection vulnerability in forumlib.php in Johnny_Vegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
|
18-10-2018 - 16:30 | 07-03-2006 - 00:02 | |
| CVE-2006-6715 | 5.1 |
PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings[footer] parameter.
|
17-10-2018 - 21:49 | 23-12-2006 - 01:28 | |
| CVE-2000-1016 | 5.0 |
The default configuration of Apache (httpd.conf) on SuSE 6.4 includes an alias for the /usr/doc directory, which allows remote attackers to read package documentation and obtain system configuration information via an HTTP request for the /doc/packag
|
10-10-2017 - 01:29 | 11-12-2000 - 05:00 |