| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-4625 | 3.6 | PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safe_mode and open_basedir, via the ini_restore function, which resets the values to their php.ini (Master Value) defaults. | 2018-10-30 16:25:00 | 2006-09-12 16:07:00 |
| CVE-2006-4534 | 9.3 | Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with name | 2018-10-30 16:25:00 | 2006-09-05 17:04:00 |
| CVE-2006-4486 | 2.6 | Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction. | 2018-10-30 16:25:00 | 2006-08-31 21:04:00 |
| CVE-2006-4485 | 10.0 | The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read. | 2018-10-30 16:25:00 | 2006-08-31 21:04:00 |
| CVE-2006-4484 | 2.6 | Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overfl | 2018-10-30 16:25:00 | 2006-08-31 21:04:00 |
| CVE-2006-4481 | 7.2 | The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_o | 2018-10-30 16:25:00 | 2006-08-31 21:04:00 |
| CVE-2006-4433 | 7.5 | PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third party session handlers, which might make it easier for remote attackers to exploit other vulnerabilities by inserting PHP code into | 2018-10-30 16:25:00 | 2006-08-29 00:04:00 |
| CVE-2006-4312 | 6.8 | Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user pas | 2018-10-30 16:25:00 | 2006-08-23 22:04:00 |
| CVE-2006-4307 | 7.2 | Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than | 2018-10-30 16:25:00 | 2006-08-23 19:04:00 |
| CVE-2006-4306 | 7.2 | Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the "File System Management" profile. | 2018-10-30 16:25:00 | 2006-08-23 19:04:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: