| Max CVSS | 10.0 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-11934 | 4.3 |
Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the way certain functions handle objects in memory, aka "Microsoft Office Information Disclosure Vulnerability".
|
30-10-2018 - 16:27 | 12-12-2017 - 21:29 | |
| CVE-2006-5520 | 7.5 |
PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the set_path parameter.
|
17-10-2018 - 21:43 | 26-10-2006 - 16:07 | |
| CVE-2006-5496 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) index.php, (2) addknowledge.php, and (3) addscreenshot.php.
|
17-10-2018 - 21:43 | 25-10-2006 - 10:07 | |
| CVE-2006-5491 | 7.5 |
Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
|
17-10-2018 - 21:43 | 25-10-2006 - 10:07 | |
| CVE-2001-0045 | 10.0 |
The default permissions for the RAS Administration key in Windows NT 4.0 allows local users to execute arbitrary commands by changing the value to point to a malicious DLL, aka one of the "Registry Permissions" vulnerabilities.
|
12-10-2018 - 21:30 | 16-02-2001 - 05:00 | |
| CVE-2006-5497 | 7.5 |
PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter.
|
19-10-2017 - 01:29 | 25-10-2006 - 10:07 | |
| CVE-2006-7106 | 7.5 |
PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter.
|
11-10-2017 - 01:31 | 03-03-2007 - 21:19 | |
| CVE-2008-4884 | 7.5 |
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:32 | 04-11-2008 - 00:57 | |
| CVE-2015-1164 | 4.3 |
Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in th
|
08-09-2017 - 01:29 | 21-01-2015 - 15:28 | |
| CVE-2011-4887 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the usern
|
29-08-2017 - 01:30 | 11-09-2014 - 14:16 | |
| CVE-2006-5488 | 7.5 |
SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login. NOTE: the provenance of this information i
|
20-07-2017 - 01:33 | 25-10-2006 - 10:07 | |
| CVE-2006-5492 | 4.0 |
Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information (document contents) via unspecified attack vectors related to "grants."
|
20-07-2017 - 01:33 | 25-10-2006 - 10:07 | |
| CVE-2006-5490 | 7.5 |
Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
20-07-2017 - 01:33 | 25-10-2006 - 10:07 | |
| CVE-2006-5446 | 5.1 |
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter. Successful exploitation requires that "magic_quotes_gpc" is disabled.
|
20-07-2017 - 01:33 | 23-10-2006 - 17:07 | |
| CVE-2016-6150 | 7.5 |
The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restrictions and possibly have unspecified other impact via unknown vectors, aka SAP Security No
|
28-11-2016 - 20:30 | 05-08-2016 - 14:59 |