| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-9485 | 4.3 |
Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive.
|
24-01-2024 - 21:15 | 16-01-2018 - 19:29 | |
| CVE-2006-3683 | 7.5 |
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
|
18-10-2018 - 16:48 | 21-07-2006 - 14:03 | |
| CVE-2006-2984 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLE_URL parameter. NOTE: it is possible that this issue is resultant from SQL injection.
|
18-10-2018 - 16:45 | 13-06-2006 - 01:02 | |
| CVE-2006-3070 | 5.0 |
write_ok.php in Zeroboard 4.1 pl8, when installed on Apache with mod_mime, allows remote attackers to bypass restrictions for uploading files with executable extensions by uploading a .htaccess file that with an AddType directive that assigns an exec
|
18-10-2018 - 16:45 | 19-06-2006 - 10:02 | |
| CVE-2006-6882 | 4.3 |
Cross-site scripting (XSS) vulnerability in golden book allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
17-10-2018 - 21:49 | 31-12-2006 - 05:00 | |
| CVE-2017-16646 | 7.2 |
drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.
|
07-04-2018 - 01:29 | 07-11-2017 - 23:29 | |
| CVE-2000-0945 | 10.0 |
The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing the /exec/ directory.
|
10-10-2017 - 01:29 | 19-12-2000 - 05:00 | |
| CVE-2016-3478 | 4.3 |
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53, 8.54, and 8.55 allows remote attackers to affect confidentiality and integrity via vectors related to File Processing.
|
01-09-2017 - 01:29 | 21-07-2016 - 10:12 | |
| CVE-2008-6085 | 7.6 |
Integer overflow in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, when configured to scan inside compressed archives, allows remote attackers to execute arbitrary code
|
08-08-2017 - 01:33 | 06-02-2009 - 11:30 | |
| CVE-2006-7039 | 5.0 |
The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a message with a long subject field.
|
29-07-2017 - 01:29 | 23-02-2007 - 03:28 | |
| CVE-2006-7040 | 7.8 |
Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a TOP command to the POP3 service.
|
29-07-2017 - 01:29 | 23-02-2007 - 03:28 | |
| CVE-2006-7038 | 7.8 |
Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the
|
29-07-2017 - 01:29 | 23-02-2007 - 03:28 | |
| CVE-2006-7041 | 7.8 |
The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (infinite loop) via a message in which neither the originator nor recipient address is known.
|
29-07-2017 - 01:29 | 23-02-2007 - 03:28 | |
| CVE-2006-3111 | 7.5 |
Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by (1) anfang, (2) name, (3) mail, (4) anrede, (5) vorname, (6) nachname, (7) gebt
|
20-07-2017 - 01:32 | 21-06-2006 - 01:02 | |
| CVE-2006-3095 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (2) account.cfm.
|
20-07-2017 - 01:32 | 19-06-2006 - 21:02 | |
| CVE-2006-3152 | 7.5 |
Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sectio parameter in (a) login.php, (b) write_newad.php, (c) newad.php, (d) printad.php, (e) askseller.php, (f
|
20-07-2017 - 01:32 | 22-06-2006 - 22:06 |