| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2006-1775 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in phpBB 2.0.19 allow remote attackers to inject arbitrary web script or HTML via the (1) Site Description field in (a) admin_board.php, the (2) Group name and (3) Group description fields in (b) ad | 2008-09-05 21:02:00 | 2006-04-13 10:02:00 |
| CVE-2006-1772 | 7.2 | debconf in Debian GNU/Linux, when configuring mnogosearch in the mnogosearch-common 3.2.31-1 package, uses the world-readable config.dat file instead of the restricted passwords.dat for storing the cleartext database administrator password in the mno | 2008-09-05 21:02:00 | 2006-04-13 10:02:00 |
| CVE-2006-1744 | 4.6 | Buffer overflow in pl_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call. | 2008-09-05 21:02:00 | 2006-04-12 22:02:00 |
| CVE-2006-1700 | 7.5 | Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication. | 2008-09-05 21:02:00 | 2006-04-11 10:02:00 |
| CVE-2006-1674 | 2.6 | Cross-site scripting (XSS) vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-1675. | 2008-09-05 21:02:00 | 2006-04-10 19:02:00 |
| CVE-2006-1656 | 7.2 | vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root. | 2008-09-05 21:02:00 | 2006-04-06 10:04:00 |
| CVE-2006-1646 | 5.0 | The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating syst | 2008-09-05 21:02:00 | 2006-04-06 10:04:00 |
| CVE-2006-1437 | 5.0 | UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt. | 2008-09-05 21:01:00 | 2006-04-15 23:02:00 |
| CVE-2006-1436 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Website, and (5) Public Remarks fields to (a) eventpublis | 2008-09-05 21:01:00 | 2006-04-15 23:02:00 |
| CVE-2006-1394 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitr | 2008-09-05 21:01:00 | 2006-03-26 23:06:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: