| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-3357 | 7.5 |
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field
|
23-07-2021 - 12:55 | 06-07-2006 - 20:05 | |
| CVE-2017-12634 | 7.5 |
The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
|
24-05-2019 - 11:29 | 15-11-2017 - 15:29 | |
| CVE-2006-3381 | 7.5 |
SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then directly accessing the file. NOTE: It is uncertain whether this is a vulnerability or a feature of the product.
|
18-10-2018 - 16:47 | 06-07-2006 - 20:05 | |
| CVE-2006-3362 | 5.1 |
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when
|
18-10-2018 - 16:47 | 06-07-2006 - 20:05 | |
| CVE-2006-3382 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string".
|
18-10-2018 - 16:47 | 06-07-2006 - 20:05 | |
| CVE-2006-3763 | 7.5 |
SQL injection vulnerability in category.php in Diesel Joke Site allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
17-10-2018 - 21:29 | 21-07-2006 - 14:03 | |
| CVE-2006-1311 | 9.3 |
The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute ar
|
12-10-2018 - 21:39 | 13-02-2007 - 20:28 | |
| CVE-2008-6074 | 5.1 |
Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the importFunction parameter.
|
11-10-2018 - 20:56 | 06-02-2009 - 11:30 | |
| CVE-2006-3394 | 7.5 |
SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action.
|
19-10-2017 - 01:29 | 06-07-2006 - 20:05 | |
| CVE-2006-3347 | 7.5 |
SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
19-10-2017 - 01:29 | 03-07-2006 - 19:05 | |
| CVE-2006-3375 | 7.5 |
PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter.
|
19-10-2017 - 01:29 | 06-07-2006 - 20:05 | |
| CVE-2000-1024 | 10.0 |
eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
|
10-10-2017 - 01:29 | 11-12-2000 - 05:00 | |
| CVE-2013-1713 | 4.3 |
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, wh
|
19-09-2017 - 01:36 | 07-08-2013 - 01:55 | |
| CVE-2016-3568 | 5.8 |
Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to W
|
01-09-2017 - 01:29 | 21-07-2016 - 10:14 | |
| CVE-2012-1020 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the (1) visitor_language parameter to register.php or (2) message parameter.
|
29-08-2017 - 01:31 | 08-02-2012 - 00:55 |