| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4708 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php.
|
17-10-2018 - 21:39 | 12-09-2006 - 16:07 | |
| CVE-2006-4670 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) includes/cart.inc.php or (2) extras/ext_cats.php.
|
17-10-2018 - 21:39 | 09-09-2006 - 00:04 | |
| CVE-2006-4709 | 5.0 |
SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter.
|
17-10-2018 - 21:39 | 12-09-2006 - 16:07 | |
| CVE-2006-4667 | 7.5 |
Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in (a) class/sessions.class.php, and the (2) timezone_offset and (3) umode parameters in (b) class/xoopsuser.php
|
17-10-2018 - 21:38 | 09-09-2006 - 00:04 | |
| CVE-2017-8019 | 5.0 |
An issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and LIA) could potentially allow an unauthenticated remote attacker to send specifically crafted packets to stop ScaleIO services and cause a denial of serv
|
15-12-2017 - 17:21 | 28-11-2017 - 07:29 | |
| CVE-2006-4723 | 5.1 |
PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter. Suc
|
19-10-2017 - 01:29 | 12-09-2006 - 16:07 | |
| CVE-2006-4669 | 5.1 |
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter.
|
19-10-2017 - 01:29 | 09-09-2006 - 00:04 | |
| CVE-2000-1163 | 4.6 |
ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which ano
|
10-10-2017 - 01:29 | 09-01-2001 - 05:00 | |
| CVE-2016-5445 | 7.5 |
Unspecified vulnerability in the ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
|
01-09-2017 - 01:29 | 21-07-2016 - 10:14 | |
| CVE-2012-1217 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in STHS v2 Web Portal 2.2 allow remote attackers to inject arbitrary web script or HTML via the team parameter to (1) prospects.php, (2) prospect.php, or (3) team.php.
|
29-08-2017 - 01:31 | 21-02-2012 - 13:31 | |
| CVE-2008-4794 | 9.3 |
Opera before 9.62 allows remote attackers to execute arbitrary commands via the History Search results page, a different vulnerability than CVE-2008-4696.
|
08-08-2017 - 01:32 | 30-10-2008 - 20:56 | |
| CVE-2008-4795 | 4.3 |
The links panel in Opera before 9.62 processes Javascript within the context of the "outermost page" of a frame, which allows remote attackers to inject arbitrary web script or HTML via cross-site scripting (XSS) attacks.
|
08-08-2017 - 01:32 | 30-10-2008 - 20:56 | |
| CVE-2006-6931 | 5.0 |
Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a
|
29-07-2017 - 01:29 | 16-01-2007 - 23:28 | |
| CVE-2006-4683 | 5.0 |
IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.
|
08-03-2011 - 02:41 | 11-09-2006 - 17:04 | |
| CVE-2006-4682 | 5.0 |
Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests and (2) malformed packets. This vulnerability is addr
|
08-03-2011 - 02:41 | 11-09-2006 - 17:04 |