| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-16845 | 6.4 |
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
|
10-09-2020 - 17:42 | 17-11-2017 - 20:29 | |
| CVE-2006-3996 | 6.5 |
SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters. Update to 1.5.3.2
|
17-10-2018 - 21:32 | 05-08-2006 - 00:04 | |
| CVE-2000-0887 | 5.0 |
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
|
03-05-2018 - 01:29 | 19-12-2000 - 05:00 | |
| CVE-2006-3995 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 co
|
19-10-2017 - 01:29 | 05-08-2006 - 00:04 | |
| CVE-2006-3962 | 7.5 |
PHP remote file inclusion vulnerability in administrator/components/com_bayesiannaivefilter/lang.php in the bayesiannaivefilter component (com_bayesiannaivefilter) 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the m
|
19-10-2017 - 01:29 | 01-08-2006 - 22:04 | |
| CVE-2008-6826 | 10.0 |
dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pages.
|
29-09-2017 - 01:33 | 08-06-2009 - 19:30 | |
| CVE-2016-3576 | 9.0 |
Unspecified vulnerability in the Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.5.2 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Outside In Filters, a different
|
01-09-2017 - 01:29 | 21-07-2016 - 10:14 | |
| CVE-2006-3971 | 6.8 |
Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter.
|
20-07-2017 - 01:32 | 02-08-2006 - 16:04 | |
| CVE-2006-3959 | 7.5 |
SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameter.
|
20-07-2017 - 01:32 | 01-08-2006 - 21:04 | |
| CVE-2006-3950 | 7.5 |
SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
|
20-07-2017 - 01:32 | 01-08-2006 - 21:04 | |
| CVE-2006-3972 | 5.0 |
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter.
|
20-07-2017 - 01:32 | 02-08-2006 - 16:04 | |
| CVE-2013-5003 | 6.5 |
Multiple SQL injection vulnerabilities in phpMyAdmin 3.5.x before 3.5.8.2 and 4.0.x before 4.0.4.2 allow remote authenticated users to execute arbitrary SQL commands via (1) the scale parameter to pmd_pdf.php or (2) the pdf_page_number parameter to s
|
31-12-2016 - 02:59 | 31-07-2013 - 13:20 | |
| CVE-2012-1060 | 2.1 |
Multiple cross-site scripting (XSS) vulnerabilities in revisioning_theme.inc in the Taxonomy module in the Revisioning module 6.x-3.13 and other versions before 6.x-3.14 for Drupal allow remote authenticated users with certain privileges to inject ar
|
14-02-2012 - 05:00 | 14-02-2012 - 00:55 | |
| CVE-2006-3960 | 7.5 |
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. NOTE: the provenance of this information is unknown; the details are obtained from third par
|
05-08-2011 - 04:00 | 01-08-2006 - 21:04 |