| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-6828 | 4.3 |
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.
|
14-02-2024 - 15:20 | 08-06-2009 - 19:30 | |
| CVE-2006-2023 | 5.0 |
Integer overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a large HTTP Content-Length value, which leads to an invalid memory access.
|
18-10-2018 - 16:37 | 25-04-2006 - 20:06 | |
| CVE-2006-2019 | 5.0 |
Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute.
|
18-10-2018 - 16:37 | 25-04-2006 - 17:06 | |
| CVE-2006-1993 | 5.1 |
Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which ca
|
18-10-2018 - 16:37 | 25-04-2006 - 12:50 | |
| CVE-2006-2009 | 7.5 |
PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter.
|
18-10-2018 - 16:37 | 25-04-2006 - 12:50 | |
| CVE-2006-2022 | 7.5 |
Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote attackers to execute arbitrary code via a long URL.
|
18-10-2018 - 16:37 | 25-04-2006 - 20:06 | |
| CVE-2017-16647 | 7.2 |
drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.
|
06-04-2018 - 01:29 | 07-11-2017 - 23:29 | |
| CVE-2006-6775 | 3.5 |
acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command.
|
19-10-2017 - 01:29 | 27-12-2006 - 23:28 | |
| CVE-2006-2008 | 7.5 |
PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path parameter.
|
19-10-2017 - 01:29 | 25-04-2006 - 12:50 | |
| CVE-2000-1071 | 10.0 |
The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.
|
10-10-2017 - 01:29 | 11-12-2000 - 05:00 | |
| CVE-2006-1997 | 2.1 |
Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors.
|
20-07-2017 - 01:31 | 25-04-2006 - 12:50 | |
| CVE-2006-2000 | 4.3 |
Cross-site scripting (XSS) vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter.
|
20-07-2017 - 01:31 | 25-04-2006 - 12:50 | |
| CVE-2006-2014 | 5.0 |
Directory traversal vulnerability in gallerie.php in SL_site 1.0 allows remote attackers to list images in arbitrary directories via ".." sequences in the rep parameter, which is used to construct a directory name in admin/config.inc.php. NOTE: this
|
20-07-2017 - 01:31 | 25-04-2006 - 12:50 | |
| CVE-2006-2039 | 7.5 |
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
|
20-07-2017 - 01:31 | 26-04-2006 - 18:06 | |
| CVE-2004-1206 | 5.0 |
Directory traversal vulnerability in codebrowserpntm.php in pnTresMailer 6.0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the filetodownload parameter.
|
11-07-2017 - 01:30 | 10-01-2005 - 05:00 | |
| CVE-2014-8017 | 5.0 |
The periodic-backup feature in Cisco Identity Services Engine (ISE) allows remote attackers to discover backup-encryption passwords via a crafted request that triggers inclusion of a password in a reply, aka Bug ID CSCur41673.
|
03-01-2017 - 02:59 | 22-12-2014 - 19:59 |