Max CVSS 10.0 Min CVSS 3.5 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2006-2307 4.3
Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name.
18-10-2018 - 16:39 11-05-2006 - 10:02
CVE-2006-2287 5.8
Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user's profile.
18-10-2018 - 16:39 10-05-2006 - 02:14
CVE-2006-2270 7.5
PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relative_script_path parameter.
18-10-2018 - 16:38 09-05-2006 - 10:02
CVE-2006-2252 6.4
Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
18-10-2018 - 16:38 09-05-2006 - 10:02
CVE-2006-2268 7.5
SQL injection vulnerability in FlexCustomer 0.0.4 and earlier allows remote attackers to bypass authentication and execute arbitrary SQL commands via the admin and ordinary user interface, probably involving the (1) checkuser and (2) checkpass parame
18-10-2018 - 16:38 09-05-2006 - 10:02
CVE-2006-2282 4.3
Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php.
18-10-2018 - 16:38 10-05-2006 - 02:14
CVE-2006-2269 4.3
Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.
18-10-2018 - 16:38 09-05-2006 - 10:02
CVE-2000-0967 10.0
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
03-05-2018 - 01:29 19-12-2000 - 05:00
CVE-2017-4927 5.0
VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service.
04-12-2017 - 16:30 17-11-2017 - 14:29
CVE-2008-4605 7.5
SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) dish.php and (2) menu.php.
29-09-2017 - 01:32 18-10-2008 - 00:18
CVE-2016-1446 6.5
SQL injection vulnerability in Cisco WebEx Meetings Server 2.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuy83200.
01-09-2017 - 01:29 15-07-2016 - 16:59
CVE-2006-7043 3.5
Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags in (1) posts and (2) profile names; and (3) a javascript URI in a URL argument in the phot
29-07-2017 - 01:29 24-02-2007 - 00:28
CVE-2006-2340 5.8
Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password, or (3) User-Agent HTTP header in th
20-07-2017 - 01:31 12-05-2006 - 01:02
CVE-2013-3930 9.3
Stack-based buffer overflow in Core FTP before 2.2 build 1785 allows remote FTP servers to execute arbitrary code via a crafted directory name in a CWD command reply.
11-08-2014 - 18:12 04-04-2014 - 14:55
CVE-2006-6814 6.3
Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbitrary directories via ..\ (dot dot backslash) sequences in the BrowsePat
08-03-2011 - 02:47 29-12-2006 - 11:28
Back to Top Mark selected
Back to Top