| Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4692 | 5.1 |
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slas
|
13-02-2024 - 17:50 | 10-10-2006 - 22:07 | |
| CVE-2010-2786 | 6.8 |
Directory traversal vulnerability in Piwik 0.6 through 0.6.3 allows remote attackers to include arbitrary local files and possibly have unspecified other impact via directory traversal sequences in a crafted data-renderer request.
|
21-11-2019 - 13:30 | 02-08-2010 - 22:00 | |
| CVE-2017-16721 | 4.3 |
A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerability could allow an unauthenticated attacker to inject arbitrary code.
|
09-10-2019 - 23:25 | 04-12-2017 - 15:29 | |
| CVE-2006-5387 | 7.5 |
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
|
17-10-2018 - 21:42 | 18-10-2006 - 19:07 | |
| CVE-2006-5121 | 7.5 |
SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter.
|
17-10-2018 - 21:41 | 03-10-2006 - 04:03 | |
| CVE-2006-5194 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information.
|
17-10-2018 - 21:41 | 10-10-2006 - 04:06 | |
| CVE-2000-1082 | 4.6 |
The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which al
|
12-10-2018 - 21:29 | 09-01-2001 - 05:00 | |
| CVE-2006-7128 | 7.5 |
PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website parameter.
|
11-10-2017 - 01:31 | 06-03-2007 - 01:19 | |
| CVE-2015-0303 | 10.0 |
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X and before 16.0.0.272 on Android, Adobe AIR SDK before 16.0.0.272, and
|
08-09-2017 - 01:29 | 13-01-2015 - 23:59 | |
| CVE-2016-3608 | 5.0 |
Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 allows remote attackers to affect confidentiality via vectors related to Administration.
|
01-09-2017 - 01:29 | 21-07-2016 - 10:14 | |
| CVE-2006-7110 | 5.5 |
Directory traversal vulnerability in the delete function in IMCE before 1.6, a Drupal module, allows remote authenticated users to delete arbitrary files via ".." sequences.
|
29-07-2017 - 01:29 | 05-03-2007 - 20:19 | |
| CVE-2006-5185 | 7.5 |
Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function. This vulnerabi
|
20-07-2017 - 01:33 | 10-10-2006 - 04:06 | |
| CVE-2006-4511 | 5.0 |
Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to
|
20-07-2017 - 01:33 | 05-10-2006 - 04:04 | |
| CVE-2004-1324 | 2.6 |
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
|
11-07-2017 - 01:30 | 18-12-2004 - 05:00 |