| Max CVSS | 9.3 | Min CVSS | 3.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4993 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _AMGconfig[cfg_serverpath] parameter in (1) modules/AllMyGuests/signin.php (aka the Nuke module)
|
23-04-2024 - 19:52 | 26-09-2006 - 02:07 | |
| CVE-2006-3435 | 9.3 |
PowerPoint in Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac does not properly parse the slide notes field in a document, which allows remote user-assisted attackers to execute arbitrary code via crafted data in this field, which trig
|
30-10-2018 - 16:25 | 10-10-2006 - 21:07 | |
| CVE-2006-5921 | 5.8 |
Multiple cross-site scripting (XSS) vulnerabilities in add_comment.php in Wheatblog (wB) allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) WWW, and (3) Comment fields. NOTE: this issue may overlap CVE-2006-5195.
|
17-10-2018 - 21:45 | 15-11-2006 - 15:07 | |
| CVE-2006-5161 | 6.4 |
IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5149 | 7.5 |
Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2006-5163 | 3.6 |
IBM Informix Dynamic Server 10.UC3RC1 Trial for Linux and possibly other versions creates /tmp/installserver.txt with insecure permissions, which allows local users to append data to arbitrary files via a symlink attack.
|
17-10-2018 - 21:41 | 05-10-2006 - 04:04 | |
| CVE-2000-1081 | 4.6 |
The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which
|
12-10-2018 - 21:29 | 09-01-2001 - 05:00 | |
| CVE-2015-0203 | 4.0 |
The qpidd broker in Apache Qpid 0.30 and earlier allows remote authenticated users to cause a denial of service (daemon crash) via an AMQP message with (1) an invalid range in a sequence set, (2) content-bearing methods other than message-transfer, o
|
18-03-2018 - 14:05 | 21-02-2018 - 15:29 | |
| CVE-2017-17084 | 5.0 |
In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.
|
04-02-2018 - 02:29 | 01-12-2017 - 08:29 | |
| CVE-2008-4901 | 7.5 |
SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
19-10-2017 - 01:30 | 04-11-2008 - 00:58 | |
| CVE-2006-5187 | 7.5 |
PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
|
19-10-2017 - 01:29 | 10-10-2006 - 04:06 | |
| CVE-2016-3502 | 6.0 |
Unspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8 and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
|
01-09-2017 - 01:29 | 21-07-2016 - 10:12 | |
| CVE-2006-5150 | 6.5 |
SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors.
|
20-07-2017 - 01:33 | 05-10-2006 - 04:04 | |
| CVE-2006-5196 | 7.8 |
The HTTP interface in the Motorola SURFboard SB4200 Cable Modem allows remote attackers to cause a denial of service (device crash) via a request with MfcISAPICommand set to SecretProc and a long string in the Secret parameter.
|
20-07-2017 - 01:33 | 10-10-2006 - 04:06 | |
| CVE-2006-5195 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained from th
|
05-09-2008 - 21:11 | 10-10-2006 - 04:06 |