| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-6838 | 7.5 |
Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.
|
14-02-2024 - 01:17 | 31-12-2006 - 05:00 | |
| CVE-2011-1168 | 4.3 |
Cross-site scripting (XSS) vulnerability in the KHTMLPart::htmlError function in khtml/khtml_part.cpp in Konqueror in KDE SC 4.4.0 through 4.6.1 allows remote attackers to inject arbitrary web script or HTML via the URI in a URL corresponding to an u
|
13-02-2023 - 04:29 | 18-04-2011 - 18:55 | |
| CVE-2005-3860 | 7.5 |
PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athena_dir parameter.
|
19-10-2018 - 15:39 | 29-11-2005 - 11:03 | |
| CVE-2006-3516 | 7.5 |
Multiple SQL injection vulnerabilities in FreeHost allow remote attackers to execute arbitrary SQL commands via (1) readme parameter to FreeHost/misc.php or (2) index parameter to FreeHost/news.php.
|
18-10-2018 - 16:47 | 11-07-2006 - 23:05 | |
| CVE-2006-6797 | 6.6 |
The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (crash) or read arbitrary memory from csrss.exe via crafted arguments to the NtRaiseHardError function with status 0x50000018, a differe
|
17-10-2018 - 21:49 | 28-12-2006 - 15:28 | |
| CVE-2006-6835 | 7.5 |
SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php.
|
17-10-2018 - 21:49 | 31-12-2006 - 05:00 | |
| CVE-2006-6844 | 6.8 |
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.
|
17-10-2018 - 21:49 | 31-12-2006 - 05:00 | |
| CVE-2006-6749 | 9.3 |
Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str parameter.
|
17-10-2018 - 21:49 | 27-12-2006 - 00:28 | |
| CVE-2006-6779 | 6.8 |
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript. Successful exploitation requires the ability to up
|
17-10-2018 - 21:49 | 28-12-2006 - 00:28 | |
| CVE-2006-6837 | 6.8 |
Multiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree functions in the ISO (iso_wincmd) plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long
|
17-10-2018 - 21:49 | 31-12-2006 - 05:00 | |
| CVE-2006-6425 | 9.0 |
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command. Successful exploitation requires a valid user
|
17-10-2018 - 21:48 | 27-12-2006 - 01:28 | |
| CVE-2006-6424 | 9.0 |
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (
|
17-10-2018 - 21:48 | 27-12-2006 - 01:28 | |
| CVE-2006-6104 | 5.0 |
The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by appending a space (%20) to a URI, and (2) read credentials via a request for
|
17-10-2018 - 21:46 | 21-12-2006 - 19:28 | |
| CVE-2007-0600 | 7.5 |
SQL injection vulnerability in news_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter.
|
16-10-2018 - 16:33 | 30-01-2007 - 18:28 | |
| CVE-2007-5370 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1 allow remote attackers to inject arbitrary web script or HTML via the (1) group or (2) utag parameter.
|
15-10-2018 - 21:44 | 11-10-2007 - 10:17 | |
| CVE-2008-3101 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the parenttab parameter in an index action to the Products module, as reachable through index.php; (2) the u
|
11-10-2018 - 20:45 | 03-09-2008 - 14:12 |