| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0684 | 7.5 | change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access. | 2018-10-19 15:45:00 | 2006-02-15 00:02:00 |
| CVE-2006-0683 | 4.3 | Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly han | 2018-10-19 15:45:00 | 2006-02-15 00:02:00 |
| CVE-2006-0678 | 1.5 | PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via a crafted SET SESSION AUTHORIZATION command, a dif | 2018-10-19 15:45:00 | 2006-02-14 19:06:00 |
| CVE-2006-0553 | 6.5 | PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678. | 2018-10-19 15:45:00 | 2006-02-14 19:06:00 |
| CVE-2006-0677 | 7.8 | telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server crash) via unknown vectors that trigger a null dereference. | 2018-10-19 15:45:00 | 2006-02-14 11:06:00 |
| CVE-2006-0676 | 4.3 | Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter. | 2018-10-19 15:45:00 | 2006-02-13 22:02:00 |
| CVE-2006-0675 | 4.3 | Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter. | 2018-10-19 15:45:00 | 2006-02-13 22:02:00 |
| CVE-2006-0673 | 7.5 | Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) $total_login and (2) $total_password parameter. | 2018-10-19 15:45:00 | 2006-02-13 22:02:00 |
| CVE-2006-0670 | 5.0 | Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet. | 2018-10-19 15:45:00 | 2006-02-13 22:02:00 |
| CVE-2006-0660 | 6.4 | Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include | 2018-10-19 15:45:00 | 2006-02-13 11:06:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: