Show filters
403 Total Results
Displaying 321-330 of 403
Sort by:
Attacker Value
Unknown
CVE-2006-4492
Disclosure Date: August 31, 2006 (last updated October 04, 2023)
Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows allows remote attackers to obtain sensitive information, including users and groups, via unspecified vectors.
0
Attacker Value
Unknown
CVE-2006-4359
Disclosure Date: August 27, 2006 (last updated October 04, 2023)
Stack-based buffer overflow in Trident Software PowerZip 7.06 Build 3895 on Windows 2000 allows remote attackers to execute arbitrary code via a ZIP archive containing a long filename.
0
Attacker Value
Unknown
CVE-2006-4184
Disclosure Date: August 17, 2006 (last updated October 04, 2023)
SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information.
0
Attacker Value
Unknown
CVE-2006-3350
Disclosure Date: July 28, 2006 (last updated October 04, 2023)
Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive.
0
Attacker Value
Unknown
CVE-2006-3842
Disclosure Date: July 25, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message.
0
Attacker Value
Unknown
CVE-2006-3589
Disclosure Date: July 21, 2006 (last updated October 04, 2023)
vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key.
0
Attacker Value
Unknown
CVE-2006-3595
Disclosure Date: July 18, 2006 (last updated October 04, 2023)
The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.
0
Attacker Value
Unknown
CVE-2006-3135
Disclosure Date: July 13, 2006 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstring parameter in (b) the search module, (3) id parameter in (c) the webshop module, (4) username parameter in (d) index.php, and (5) Name, (6) Address, (7) Zip, (8) City, (9) Country, and (10) Email fields during (e) a user profile update.
0
Attacker Value
Unknown
CVE-2006-2931
Disclosure Date: June 21, 2006 (last updated October 04, 2023)
CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files.
0
Attacker Value
Unknown
CVE-2006-2911
Disclosure Date: June 21, 2006 (last updated October 04, 2023)
SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter.
0
