|
279941
|
- |
|
mono
|
xsp
|
The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by appending a space (%20) t…
|
NVD-CWE-Other
|
CVE-2006-6104
|
2018-10-18 06:46 |
2006-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279942
|
- |
|
linux
|
linux_kernel
|
Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, a…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2006-6106
|
2018-10-18 06:46 |
2006-12-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279943
|
- |
|
bpg-infotech
|
content_management_system
|
Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the (1) vjob parameter in publicat…
|
NVD-CWE-Other
|
CVE-2006-6110
|
2018-10-18 06:46 |
2006-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279944
|
- |
|
lifetype
|
lifetype
|
LifeType 1.0.x and 1.1.x have insufficient access control for all of the PHP scripts under (1) class/ and (2) plugins/, which allows remote attackers to obtain the installation path via a direct requ…
|
NVD-CWE-Other
|
CVE-2006-6112
|
2018-10-18 06:46 |
2006-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279945
|
- |
|
james_greenwood
|
monkey_boards
|
Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to (1) include/admin_auth.inc.php and (2) include/engine/class.compiler.php, which reveals the full pat…
|
NVD-CWE-Other
|
CVE-2006-6113
|
2018-10-18 06:46 |
2006-11-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279946
|
- |
|
mmgallery
|
mmgallery
|
Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
|
NVD-CWE-Other
|
CVE-2006-6118
|
2018-10-18 06:46 |
2006-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279947
|
- |
|
mmgallery
|
mmgallery
|
mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which reveals the installation path in various error messages.
|
NVD-CWE-Other
|
CVE-2006-6119
|
2018-10-18 06:46 |
2006-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279948
|
- |
|
kde
|
koffice
|
Integer overflow in the KPresenter import filter for Microsoft PowerPoint files (filters/olefilters/lib/klaola.cc) in KOffice before 1.6.1 allows user-assisted remote attackers to execute arbitrary c…
|
NVD-CWE-Other
|
CVE-2006-6120
|
2018-10-18 06:46 |
2006-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279949
|
- |
|
acer
|
lunchapp.aplunch
|
Acer Notebook LunchApp.APlunch ActiveX control allows remote attackers to execute arbitrary commands by calling the Run method.
|
NVD-CWE-Other
|
CVE-2006-6121
|
2018-10-18 06:46 |
2006-11-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279950
|
- |
|
businessobjects microsoft
|
crystal_reports_xi visual_studio_.net
|
Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Repor…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2006-6133
|
2018-10-18 06:46 |
2006-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|