| Max CVSS | 10.0 | Min CVSS | 1.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-4225 | 6.8 |
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than
|
26-01-2023 - 13:53 | 13-07-2016 - 02:00 | |
| CVE-2016-4224 | 6.8 |
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than
|
26-01-2023 - 13:50 | 13-07-2016 - 02:00 | |
| CVE-2016-4223 | 6.8 |
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than
|
26-01-2023 - 13:49 | 13-07-2016 - 02:00 | |
| CVE-2006-1388 | 7.5 |
Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.
|
23-07-2021 - 12:55 | 24-03-2006 - 20:02 | |
| CVE-2001-0149 | 5.0 |
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.
|
23-07-2021 - 12:18 | 02-06-2001 - 04:00 | |
| CVE-2017-0842 | 7.2 |
An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513.
|
03-10-2019 - 00:03 | 16-11-2017 - 23:29 | |
| CVE-2017-0841 | 9.3 |
A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37723026.
|
03-10-2019 - 00:03 | 16-11-2017 - 23:29 | |
| CVE-2006-1364 | 7.8 |
Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly reque
|
18-10-2018 - 16:32 | 23-03-2006 - 11:06 | |
| CVE-2006-1350 | 7.5 |
PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter.
|
18-10-2018 - 16:32 | 22-03-2006 - 01:02 | |
| CVE-2006-1366 | 7.8 |
Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service (device shutdown), and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Tra
|
18-10-2018 - 16:32 | 23-03-2006 - 23:06 | |
| CVE-2006-1373 | 4.3 |
Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter.
|
18-10-2018 - 16:32 | 24-03-2006 - 02:02 | |
| CVE-2014-8793 | 4.3 |
Cross-site scripting (XSS) vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via the refresh_page parameter to www/admin/report-generate.php.
|
09-10-2018 - 19:54 | 19-12-2014 - 15:59 | |
| CVE-2008-4215 | 7.5 |
Weblog in Mac OS X Server 10.4.11 does not properly check an error condition when a weblog posting access control list is specified for a user that has multiple short names, which might allow attackers to bypass intended access restrictions.
|
08-08-2017 - 01:32 | 10-10-2008 - 10:30 | |
| CVE-2006-1276 | 10.0 |
admin.php in Himpfen Consulting Company PHP SimpleNEWS 1.0.0 allows remote attackers to bypass authentication by setting the admin parameter in a cookie.
|
20-07-2017 - 01:30 | 19-03-2006 - 11:06 | |
| CVE-2006-1361 | 4.3 |
Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml. This vulnerability is addressed in the following product releas
|
20-07-2017 - 01:30 | 23-03-2006 - 11:06 | |
| CVE-2006-1369 | 6.8 |
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message (PM) in certain circumstances. Update to version 2.1.5 (2006
|
20-07-2017 - 01:30 | 23-03-2006 - 23:06 | |
| CVE-2005-4418 | 7.5 |
util-vserver before 0.30.208-1 with kernel-patch-vserver before 1.9.5.5 and 2.x before 2.3 for Debian GNU/Linux sets a default policy that trusts unknown capabilities, which could allow local users to conduct unauthorized activities. Update to versio
|
20-07-2017 - 01:29 | 31-12-2005 - 05:00 | |
| CVE-2006-0050 | 1.2 |
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file.
|
20-07-2017 - 01:29 | 23-03-2006 - 11:06 |