265171
|
- |
|
secure_elements
|
class_5_enterprise_vulnerability_management
|
Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote attackers to modify and replay messages.
|
NVD-CWE-Other
|
CVE-2006-2712
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265172
|
- |
|
secure_elements
|
class_5_enterprise_vulnerability_management
|
Upgrade to version 2.8.1
|
NVD-CWE-Other
|
CVE-2006-2712
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265173
|
- |
|
secure_elements
|
c5_enterprise_vulnerability_management
|
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks …
|
NVD-CWE-Other
|
CVE-2006-2713
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265174
|
- |
|
secure_elements
|
c5_enterprise_vulnerability_management
|
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the…
|
NVD-CWE-Other
|
CVE-2006-2714
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265175
|
- |
|
secure_elements
|
c5_enterprise_vulnerability_management
|
The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.
|
NVD-CWE-Other
|
CVE-2006-2715
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265176
|
- |
|
secure_elements
|
c5_enterprise_vulnerability_management
|
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server.
|
NVD-CWE-Other
|
CVE-2006-2716
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265177
|
- |
|
secure_elements
|
c5_enterprise_vulnerability_management
|
Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2…
|
NVD-CWE-Other
|
CVE-2006-2717
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265178
|
- |
|
out_of_the_trees_web_design
|
selectapix
|
SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; th…
|
NVD-CWE-Other
|
CVE-2006-2722
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265179
|
- |
|
punbb
|
punbb
|
Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the "Admin note" feature, a diff…
|
NVD-CWE-Other
|
CVE-2006-2724
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
265180
|
- |
|
jan_chmelik
|
photoalbum_bandw
|
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of t…
|
NVD-CWE-Other
|
CVE-2006-2729
|
2017-07-20 10:31 |
2006-06-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|