|
357501
|
2.6 |
LOW
|
microsoft
|
word
|
Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz.
|
NVD-CWE-Other
|
CVE-2006-0935
|
2008-09-6 06:00 |
2006-02-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357502
|
7.5 |
HIGH
|
pwsphp
|
pwsphp
|
SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulner…
|
NVD-CWE-Other
|
CVE-2006-0942
|
2008-09-6 06:00 |
2006-03-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357503
|
6.4 |
MEDIUM
|
cactusoft
|
parodia
|
agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG_ID parameter. NOTE: the provenance of this info…
|
NVD-CWE-Other
|
CVE-2006-1005
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357504
|
6.4 |
MEDIUM
|
cactusoft
|
parodia
|
This vulnerability affects CactuSoft, Parodia version 6.2, and may affect all previous versions as well.
|
NVD-CWE-Other
|
CVE-2006-1005
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357505
|
4.3 |
MEDIUM
|
woltlab
|
burning_board
|
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php an…
|
NVD-CWE-Other
|
CVE-2006-1034
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357506
|
7.5 |
HIGH
|
oracle
|
diagnostics
e-business_suite
|
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2006-1035
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357507
|
7.5 |
HIGH
|
oracle
|
diagnostics
|
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."
|
NVD-CWE-Other
|
CVE-2006-1036
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357508
|
10.0 |
HIGH
|
joomla
|
joomla
|
Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors.
|
NVD-CWE-Other
|
CVE-2006-1047
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357509
|
4.3 |
MEDIUM
|
douran
|
followweb
|
Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this …
|
NVD-CWE-Other
|
CVE-2006-0373
|
2008-09-6 05:59 |
2006-01-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357510
|
6.4 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a de…
|
NVD-CWE-Other
|
CVE-2006-0419
|
2008-09-6 05:59 |
2006-01-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357511
|
5.0 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service…
|
NVD-CWE-Other
|
CVE-2006-0420
|
2008-09-6 05:59 |
2006-01-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357512
|
4.3 |
MEDIUM
|
ideosoft_design
|
ideocontent_manager
|
Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the (1) goto_id parameter to index.php or (2) page parameter to news…
|
NVD-CWE-Other
|
CVE-2006-0463
|
2008-09-6 05:59 |
2006-01-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357513
|
7.5 |
HIGH
|
ideosoft_design
|
ideocontent_manager
|
Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the (1) goto_id or (2) mid parameter.
|
NVD-CWE-Other
|
CVE-2006-0464
|
2008-09-6 05:59 |
2006-01-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357514
|
4.3 |
MEDIUM
|
active121
|
site_manager
|
Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter.
|
NVD-CWE-Other
|
CVE-2006-0465
|
2008-09-6 05:59 |
2006-01-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357515
|
4.3 |
MEDIUM
|
communityserver.org
|
community_server
|
Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: this candidate does not contai…
|
CWE-79
クロスサイト・スクリプティング（XSS）
|
CVE-2006-0535
|
2008-09-6 05:59 |
2006-02-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357516
|
5.0 |
MEDIUM
|
cerulean_studios
|
trillian
|
Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \'d1, (2) \'d…
|
NVD-CWE-Other
|
CVE-2006-0543
|
2008-09-6 05:59 |
2006-02-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357517
|
7.5 |
HIGH
|
microsoft
|
ie
|
urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND elemen…
|
NVD-CWE-Other
|
CVE-2006-0544
|
2008-09-6 05:59 |
2006-02-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357518
|
4.4 |
MEDIUM
|
suse
|
suse_linux
|
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other use…
|
NVD-CWE-Other
|
CVE-2006-0646
|
2008-09-6 05:59 |
2006-02-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357519
|
7.5 |
HIGH
|
pwsphp
|
pwsphp
|
SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espace_membre module. NOTE: th…
|
NVD-CWE-Other
|
CVE-2006-0668
|
2008-09-6 05:59 |
2006-02-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357520
|
6.6 |
MEDIUM
|
gentoo
|
app-crypt_pinentry
linux
|
The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0.
|
NVD-CWE-Other
|
CVE-2006-0071
|
2008-09-6 05:58 |
2006-01-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357521
|
7.5 |
HIGH
|
sco
|
openserver
|
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-200…
|
NVD-CWE-Other
|
CVE-2006-0072
|
2008-09-6 05:58 |
2006-01-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357522
|
4.3 |
MEDIUM
|
discusware
|
discus_freeware
discus_professional
|
Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, …
|
NVD-CWE-Other
|
CVE-2006-0073
|
2008-09-6 05:58 |
2006-01-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357523
|
4.6 |
MEDIUM
|
openbsd
|
openbsd
|
The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/.
|
NVD-CWE-Other
|
CVE-2006-0098
|
2008-09-6 05:58 |
2006-01-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357524
|
5.0 |
MEDIUM
|
enhanced_simple_php_gallery
|
enhanced_simple_php_gallery
|
Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sp_helper_functions.php, which leaks the pathname in an error message.
|
NVD-CWE-Other
|
CVE-2006-0113
|
2008-09-6 05:58 |
2006-01-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357525
|
7.5 |
HIGH
|
rockliffe
|
mailsite
|
Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names …
|
NVD-CWE-Other
|
CVE-2006-0130
|
2008-09-6 05:58 |
2006-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357526
|
5.0 |
MEDIUM
|
amsn
|
amsn
|
aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the defaul…
|
NVD-CWE-Other
|
CVE-2006-0138
|
2008-09-6 05:58 |
2006-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357527
|
4.3 |
MEDIUM
|
simpbook
|
simpbook
|
Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.
|
NVD-CWE-Other
|
CVE-2006-0149
|
2008-09-6 05:58 |
2006-01-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357528
|
5.0 |
MEDIUM
|
reamday_enterprises
|
magic_news_plus
|
settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_pas…
|
NVD-CWE-Other
|
CVE-2006-0157
|
2008-09-6 05:58 |
2006-01-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357529
|
4.3 |
MEDIUM
|
qualityebiz
|
quality_ppc
|
Cross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. NOTE: t…
|
NVD-CWE-Other
|
CVE-2006-0215
|
2008-09-6 05:58 |
2006-01-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357530
|
5.0 |
MEDIUM
|
qualityebiz
|
quality_ppc
|
admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters…
|
NVD-CWE-Other
|
CVE-2006-0216
|
2008-09-6 05:58 |
2006-01-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357531
|
10.0 |
HIGH
|
joomla
|
joomla
|
Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, and (4) other components in Joomla! 1.0.5 and earlier have unknown impact and atta…
|
NVD-CWE-Other
|
CVE-2006-0303
|
2008-09-6 05:58 |
2006-01-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357532
|
4.3 |
MEDIUM
|
chitta
|
mimicboard_2
|
Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters asso…
|
NVD-CWE-Other
|
CVE-2005-4858
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357533
|
4.3 |
MEDIUM
|
chitta
|
mimicboard_2
|
In addition to the sites referenced. http://secunia.com/product/5681/ gives an advisory for the vulnerability as well as additional descripton.
|
NVD-CWE-Other
|
CVE-2005-4858
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357534
|
6.4 |
MEDIUM
|
chitta
|
mimicboard
|
mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mi…
|
NVD-CWE-Other
|
CVE-2005-4859
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357535
|
7.5 |
HIGH
|
jasio.net
|
ragnarok_online_control_panel
|
functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is no…
|
CWE-287
不適切な認証
|
CVE-2005-4861
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357536
|
5.0 |
MEDIUM
|
xwiki
|
xwiki
|
The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.
|
CWE-255
証明書・パスワード管理
|
CVE-2005-4862
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357537
|
7.5 |
HIGH
|
hitachi
|
business_logic
|
Multiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to ex…
|
NVD-CWE-Other
|
CVE-2005-4578
|
2008-09-6 05:57 |
2005-12-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357538
|
7.5 |
HIGH
|
phpsurveyor
|
phpsurveyor
|
Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, …
|
NVD-CWE-Other
|
CVE-2005-4586
|
2008-09-6 05:57 |
2005-12-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357539
|
7.8 |
HIGH
|
juniper
|
netscreen-security_manager_2004
|
Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted …
|
NVD-CWE-Other
|
CVE-2005-4587
|
2008-09-6 05:57 |
2005-12-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357540
|
7.5 |
HIGH
|
efilego
|
efilego
|
Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files via a ... (triple dot) in (1) the URL on port 608…
|
NVD-CWE-Other
|
CVE-2005-4622
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357541
|
5.0 |
MEDIUM
|
efilego
|
efilego
|
upload.exe in eFileGo 3.01 allows remote attackers to cause a denial of service (CPU consumption) via an argument with an invalid directory name.
|
NVD-CWE-Other
|
CVE-2005-4623
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357542
|
5.0 |
MEDIUM
|
ptnet
|
ptnet_ircd
|
The m_join function in channel.c for PTnet ircd 1.5 and 1.6 allows remote attackers to cause a denial of service (memory exhaustion that triggers a daemon restart) via a large number of requests to j…
|
NVD-CWE-Other
|
CVE-2005-4624
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357543
|
7.5 |
HIGH
|
3cfr
|
3cfr
|
SQL injection vulnerability in index.php in 3CFR allows remote attackers to execute arbitrary SQL commands via the LangueID parameter.
|
NVD-CWE-Other
|
CVE-2005-4645
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357544
|
5.1 |
MEDIUM
|
illustrate
|
dbpoweramp_music_converter
|
Buffer overflow in Illustrate dBpowerAMP Music Converter 11.5 and earlier, possibly including (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe, allows user-assisted attackers to cause a deni…
|
NVD-CWE-Other
|
CVE-2005-4648
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357545
|
4.3 |
MEDIUM
|
advanced_guestbook
|
advanced_guestbook
|
Multiple cross-site scripting (XSS) vulnerabilities in Advanced Guestbook 2.2 and 2.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the entry parameter in index.php and (2) …
|
NVD-CWE-Other
|
CVE-2005-4649
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357546
|
7.5 |
HIGH
|
ocean12_technologies
|
calendar_manager_pro
|
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via a direct request to /admin/view.asp. NOTE: the provenance of this information …
|
NVD-CWE-Other
|
CVE-2005-4657
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357547
|
1.2 |
LOW
|
ipcop
|
ipcop
|
Race condition in IPCop (aka IPCop Firewall) before 1.4.10 might allow local users to overwrite system configuration files and gain privileges by replacing a backup archive during the time window whe…
|
NVD-CWE-Other
|
CVE-2005-4660
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357548
|
4.6 |
MEDIUM
|
parosproxy
|
parosproxy
|
The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to execute arbitrary comands via crafted SQL commands that interact with HSQLDB through…
|
NVD-CWE-Other
|
CVE-2005-4668
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357549
|
7.5 |
HIGH
|
rt_internet_solutions
|
rt_internet_solutions_webadmin
|
SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.
|
NVD-CWE-Other
|
CVE-2005-4669
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
357550
|
5.0 |
MEDIUM
|
inicom_networks
|
ioftpd
|
ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote attackers to enumerate valid usernames.
|
NVD-CWE-Other
|
CVE-2005-4673
|
2008-09-6 05:57 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
