| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4973 | 4.3 |
Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.
|
14-02-2024 - 01:17 | 25-09-2006 - 01:07 | |
| CVE-2012-0502 | 6.4 |
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and u
|
13-05-2022 - 14:53 | 15-02-2012 - 22:55 | |
| CVE-2017-15119 | 5.0 |
The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. It could occur if a client sent large option requests, making the server waste CPU time on reading up to 4GB per request. A client
|
09-10-2019 - 23:24 | 27-07-2018 - 16:29 | |
| CVE-2006-4970 | 7.5 |
PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the Home_Path parameter.
|
17-10-2018 - 21:40 | 25-09-2006 - 01:07 | |
| CVE-2008-6266 | 7.5 |
SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action.
|
11-10-2018 - 20:57 | 25-02-2009 - 11:30 | |
| CVE-2006-4946 | 5.1 |
PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
|
19-10-2017 - 01:29 | 23-09-2006 - 01:07 | |
| CVE-2006-4963 | 6.4 |
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonst
|
19-10-2017 - 01:29 | 23-09-2006 - 10:07 | |
| CVE-2000-0825 | 5.0 |
Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash.
|
10-10-2017 - 01:29 | 14-11-2000 - 05:00 | |
| CVE-2016-3517 | 4.3 |
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect integrity via vectors related to PC / Get Shortcut.
|
01-09-2017 - 01:29 | 21-07-2016 - 10:13 | |
| CVE-2006-4760 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RS
|
20-07-2017 - 01:33 | 13-09-2006 - 23:07 | |
| CVE-2006-4710 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed r
|
20-07-2017 - 01:33 | 12-09-2006 - 16:07 | |
| CVE-2014-9651 | 7.5 |
Buffer overflow in CHICKEN 4.9.0.x before 4.9.0.2, 4.9.x before 4.9.1, and before 5.0 allows attackers to have unspecified impact via a positive START argument to the "substring-index[-ci] procedures."
|
01-07-2017 - 01:29 | 28-08-2015 - 21:59 | |
| CVE-2006-4438 | 6.4 |
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.
|
08-03-2011 - 02:40 | 20-09-2006 - 23:07 | |
| CVE-2007-0166 | 6.6 |
The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted, which allows local root users to overwrite arbitrary files, or mount/u
|
15-11-2008 - 06:39 | 11-01-2007 - 20:28 | |
| CVE-2006-5021 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (1) the root parameter in imgen.php, and the root_path parameter in (2) admin/config.php, (3) common.php, and (
|
05-09-2008 - 21:11 | 27-09-2006 - 23:07 |