| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4813 | 2.1 |
The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.
|
13-02-2023 - 02:16 | 12-10-2006 - 20:07 | |
| CVE-2006-6587 | 6.8 |
Cross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) allows remote attackers to inject arbitrary web script or HTML by posting a message.
|
17-07-2019 - 17:46 | 15-12-2006 - 19:28 | |
| CVE-2006-6845 | 6.8 |
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action.
|
17-10-2018 - 21:49 | 31-12-2006 - 05:00 | |
| CVE-2006-6526 | 7.5 |
PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter.
|
17-10-2018 - 21:49 | 14-12-2006 - 01:28 | |
| CVE-2008-6660 | 6.8 |
Unrestricted file upload vulnerability in bigdump.php in Alexey Ozerov BigDump 0.29b allows remote attackers to execute arbitrary code by uploading a file with an executable extension followed by a .sql extension, then accessing this file via a direc
|
11-10-2018 - 20:57 | 07-04-2009 - 19:30 | |
| CVE-2017-16687 | 5.0 |
The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the e
|
02-01-2018 - 15:47 | 12-12-2017 - 14:29 | |
| CVE-2001-0070 | 10.0 |
Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command.
|
19-12-2017 - 02:29 | 12-02-2001 - 05:00 | |
| CVE-2006-6604 | 6.5 |
Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the alias parameter, a different vector than CVE-2006-6328.
|
19-10-2017 - 01:29 | 15-12-2006 - 22:28 | |
| CVE-2006-6599 | 6.0 |
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter.
|
19-10-2017 - 01:29 | 15-12-2006 - 22:28 | |
| CVE-2006-5871 | 4.1 |
smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.
|
11-10-2017 - 01:31 | 11-12-2006 - 23:28 | |
| CVE-2016-1463 | 5.0 |
Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737.
|
01-09-2017 - 01:29 | 28-07-2016 - 01:59 | |
| CVE-2005-0289 | 5.0 |
Apple AirPort Express prior to 6.1.1 and Extreme prior to 5.5.1, configured as a Wireless Data Service (WDS), allows remote attackers to cause a denial of service (device freeze) by connecting to UDP port 161 and before link-state change occurs.
|
11-07-2017 - 01:32 | 02-05-2005 - 04:00 | |
| CVE-2006-5649 | 4.6 |
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (kernel panic) via unspecified vectors.
|
05-09-2008 - 21:12 | 14-12-2006 - 00:28 |