| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-0232 | 5.0 | Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct request | 2018-10-19 15:43:00 | 2006-04-25 01:02:00 |
| CVE-2006-0231 | 6.4 | Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications. | 2018-10-19 15:43:00 | 2006-04-25 01:02:00 |
| CVE-2006-0230 | 10.0 | Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests. | 2018-10-19 15:43:00 | 2006-04-25 01:02:00 |
| CVE-2006-0296 | 5.0 | The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf fil | 2018-10-19 15:43:00 | 2006-02-02 20:06:00 |
| CVE-2006-0295 | 5.1 | Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory | 2018-10-19 15:43:00 | 2006-02-02 20:06:00 |
| CVE-2006-0294 | 7.5 | Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to o | 2018-10-19 15:43:00 | 2006-02-02 20:06:00 |
| CVE-2006-0293 | 7.5 | The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via user-defined methods that trigger garbage collection in a way that opera | 2018-10-19 15:43:00 | 2006-02-02 20:06:00 |
| CVE-2006-0292 | 7.5 | The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garb | 2018-10-19 15:43:00 | 2006-02-02 20:06:00 |
| CVE-2006-0225 | 4.6 | scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice. | 2018-10-19 15:43:00 | 2006-01-25 11:03:00 |
| CVE-2006-0224 | 4.6 | Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument (alternative configuratio | 2018-10-19 15:43:00 | 2006-01-25 02:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: