| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0752 | 5.0 | Niels Provos Honeyd before 1.5 replies to certain illegal IP packet fragments that other IP stack implementations would drop, which allows remote attackers to identify IP addresses that are being simulated using honeyd. | 2018-10-19 15:46:00 | 2006-02-18 02:02:00 |
| CVE-2006-0750 | 7.5 | SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the userstat parameter in an army action to index.php. | 2018-10-19 15:46:00 | 2006-02-18 02:02:00 |
| CVE-2006-0739 | 5.0 | eStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE request with a Content-Length field that has more than 9 digits. | 2018-10-19 15:46:00 | 2006-02-17 01:02:00 |
| CVE-2006-0738 | 5.0 | Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service (hang) via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using (1) the field name, | 2018-10-19 15:46:00 | 2006-02-17 01:02:00 |
| CVE-2006-0737 | 5.0 | eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a negative Expires field. | 2018-10-19 15:46:00 | 2006-02-17 01:02:00 |
| CVE-2006-0559 | 10.0 | Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bo | 2018-10-19 15:45:00 | 2006-04-04 14:04:00 |
| CVE-2006-0720 | 7.6 | Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the playe | 2018-10-19 15:45:00 | 2006-02-23 21:02:00 |
| CVE-2006-0679 | 7.5 | SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable (Nickname field). | 2018-10-19 15:45:00 | 2006-02-16 20:06:00 |
| CVE-2006-0735 | 4.3 | Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an (1) img or (2) url BBco | 2018-10-19 15:45:00 | 2006-02-16 11:02:00 |
| CVE-2006-0732 | 6.4 | Directory traversal vulnerability in SAP Business Connector (BC) 4.6 and 4.7 allows remote attackers to read or delete arbitrary files via the fullName parameter to (1) sapbc/SAP/chopSAPLog.dsp or (2) invoke/sap.monitor.rfcTrace/deleteSingle. Detail | 2018-10-19 15:45:00 | 2006-02-16 11:02:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: