|
350351
|
7.5 |
HIGH
|
cisco
|
ios
|
Some classic Cisco IOS devices have a vulnerability in the PPP CHAP authentication to establish unauthorized PPP connections.
|
NVD-CWE-Other
|
CVE-1999-0160
|
2008-09-9 21:33 |
1997-10-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350352
|
7.5 |
HIGH
|
cisco
|
ios
|
In Cisco IOS 10.3, with the tacacs-ds or tacacs keyword, an extended IP access control list could bypass filtering.
|
NVD-CWE-Other
|
CVE-1999-0161
|
2008-09-9 21:33 |
1995-07-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350353
|
6.2 |
MEDIUM
|
sun
|
sunos
|
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
|
NVD-CWE-Other
|
CVE-1999-0164
|
2008-09-9 21:33 |
1995-08-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350354
|
10.0 |
HIGH
|
samba
|
samba
|
Samba has a buffer overflow which allows a remote attacker to obtain root access by specifying a long password.
|
NVD-CWE-Other
|
CVE-1999-0182
|
2008-09-9 21:33 |
1997-09-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350355
|
10.0 |
HIGH
|
sun
|
solaris
|
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
|
NVD-CWE-Other
|
CVE-1999-0186
|
2008-09-9 21:33 |
1998-10-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350356
|
6.4 |
MEDIUM
|
microsoft
|
internet_information_server
|
IIS newdsn.exe CGI script allows remote users to overwrite files.
|
NVD-CWE-Other
|
CVE-1999-0191
|
2008-09-9 21:33 |
1997-09-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350357
|
5.0 |
MEDIUM
|
webgais_development_team
|
webgais
|
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).
|
NVD-CWE-Other
|
CVE-1999-0196
|
2008-09-9 21:33 |
1997-07-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350358
|
7.5 |
HIGH
|
vtiger
|
vtiger_crm
|
Unrestricted file upload vulnerability in fileupload.html in vtiger CRM 4.2.4, and possibly earlier versions, allows remote attackers to upload and execute arbitrary files with executable extensions …
|
NVD-CWE-Other
|
CVE-2006-4617
|
2008-09-6 06:10 |
2006-09-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350359
|
4.3 |
MEDIUM
|
sage
|
sage
|
Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. S…
|
NVD-CWE-Other
|
CVE-2006-4711
|
2008-09-6 06:10 |
2006-09-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350360
|
4.3 |
MEDIUM
|
e107
|
e107
|
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, …
|
NVD-CWE-Other
|
CVE-2006-4794
|
2008-09-6 06:10 |
2006-09-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350361
|
7.5 |
HIGH
|
xine
|
xine-lib
|
Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005…
|
NVD-CWE-Other
|
CVE-2006-4799
|
2008-09-6 06:10 |
2006-09-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350362
|
10.0 |
HIGH
|
blojsom
|
blojsom
|
Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of …
|
NVD-CWE-Other
|
CVE-2006-4830
|
2008-09-6 06:10 |
2006-09-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350363
|
10.0 |
HIGH
|
blojsom
|
blojsom
|
This vulnerability is addressed in the following product release:
Blojsom, Blojsom, 2.31
|
NVD-CWE-Other
|
CVE-2006-4830
|
2008-09-6 06:10 |
2006-09-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350364
|
10.0 |
HIGH
|
limbo_cms
|
limbo_cms
|
Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antiha…
|
NVD-CWE-Other
|
CVE-2006-4860
|
2008-09-6 06:10 |
2006-09-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350365
|
4.6 |
MEDIUM
|
apple
|
mac_os_x
mac_os_x_server
|
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
|
NVD-CWE-Other
|
CVE-2006-4866
|
2008-09-6 06:10 |
2006-09-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350366
|
4.3 |
MEDIUM
|
idevspot
|
isupport
|
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the…
|
NVD-CWE-Other
|
CVE-2006-4884
|
2008-09-6 06:10 |
2006-09-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350367
|
5.0 |
MEDIUM
|
microsoft
|
ie
|
Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size th…
|
NVD-CWE-Other
|
CVE-2006-4888
|
2008-09-6 06:10 |
2006-09-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350368
|
4.9 |
MEDIUM
|
novell
|
edirectory
|
Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) via unspecified vectors, as originally demonstrated using a N…
|
NVD-CWE-Other
|
CVE-2006-4185
|
2008-09-6 06:09 |
2006-08-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350369
|
4.9 |
MEDIUM
|
novell
|
edirectory
|
This vulnerability is addressed in the following product release:
Novell, eDirectory, 8.7.3 SP9
|
NVD-CWE-Other
|
CVE-2006-4185
|
2008-09-6 06:09 |
2006-08-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350370
|
2.1 |
LOW
|
novell
|
edirectory
|
The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file.
|
NVD-CWE-Other
|
CVE-2006-4186
|
2008-09-6 06:09 |
2006-08-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350371
|
4.3 |
MEDIUM
|
panda
|
panda_activescan
|
Cross-site scripting (XSS) vulnerability in ascan_6.asp in Panda ActiveScan 5.53.00 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
|
NVD-CWE-Other
|
CVE-2006-4295
|
2008-09-6 06:09 |
2006-08-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350372
|
5.0 |
MEDIUM
|
cisco
|
content_services_switch_11000
|
The ArrowPoint cookie functionality for Cisco 11000 series Content Service Switches specifies an internal IP address if the administrator does not specify a string option, which allows remote attacke…
|
NVD-CWE-Other
|
CVE-2006-4352
|
2008-09-6 06:09 |
2006-08-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350373
|
7.5 |
HIGH
|
redblog
|
redblog
|
PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: the provenance of this informati…
|
NVD-CWE-Other
|
CVE-2006-4366
|
2008-09-6 06:09 |
2006-08-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350374
|
4.3 |
MEDIUM
|
pmwiki
|
pmwiki
|
Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups".
|
NVD-CWE-Other
|
CVE-2006-4453
|
2008-09-6 06:09 |
2006-08-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350375
|
10.0 |
HIGH
|
paessler
|
ipcheck_server_monitor
|
Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unknown impact and attack vectors.
|
NVD-CWE-Other
|
CVE-2006-4461
|
2008-09-6 06:09 |
2006-09-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350376
|
5.0 |
MEDIUM
|
moderngigabyte
|
modernbill
|
ModernBill 5.0.4 and earlier uses cURL with insecure settings for CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST that do not verify SSL certificates, which allows remote attackers to read network …
|
NVD-CWE-Other
|
CVE-2006-4499
|
2008-09-6 06:09 |
2006-09-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350377
|
4.3 |
MEDIUM
|
devellion
|
cubecart
|
Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array.
|
NVD-CWE-Other
|
CVE-2006-4525
|
2008-09-6 06:09 |
2006-09-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350378
|
7.5 |
HIGH
|
devellion
|
cubecart
|
SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the sea…
|
NVD-CWE-Other
|
CVE-2006-4526
|
2008-09-6 06:09 |
2006-09-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350379
|
2.6 |
LOW
|
devellion
|
cubecart
|
includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an insufficiently restrictive regular expression to validate the gateway parameter, which allo…
|
NVD-CWE-Other
|
CVE-2006-4527
|
2008-09-6 06:09 |
2006-09-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350380
|
5.0 |
MEDIUM
|
ibm
|
lotus_notes
|
IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase"…
|
NVD-CWE-Other
|
CVE-2006-3778
|
2008-09-6 06:08 |
2006-07-24 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350381
|
4.0 |
MEDIUM
|
kailash_nadh
|
boastmachine
|
The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to…
|
NVD-CWE-Other
|
CVE-2006-3830
|
2008-09-6 06:08 |
2006-07-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350382
|
4.3 |
MEDIUM
|
dokeos
|
dokeos
|
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
クロスサイト・スクリプティング（XSS）
|
CVE-2006-3924
|
2008-09-6 06:08 |
2006-07-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350383
|
5.0 |
MEDIUM
|
pswd.js
|
pswd.js
|
The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, …
|
CWE-255
証明書・パスワード管理
|
CVE-2006-4068
|
2008-09-6 06:08 |
2006-08-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350384
|
10.0 |
HIGH
|
david_walker
|
phpautomembersarea
|
Unspecified vulnerability in phpAutoMembersArea (phpAMA) before 3.2.4 has unknown impact and attack vectors, related to "a potential security exploit which is critical."
|
NVD-CWE-Other
|
CVE-2006-4084
|
2008-09-6 06:08 |
2006-08-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350385
|
10.0 |
HIGH
|
david_walker
|
phpautomembersarea
|
Upgrade to 3.2.4
|
NVD-CWE-Other
|
CVE-2006-4084
|
2008-09-6 06:08 |
2006-08-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350386
|
6.4 |
MEDIUM
|
tor
|
tor
|
TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the en…
|
NVD-CWE-Other
|
CVE-2006-3411
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350387
|
6.4 |
MEDIUM
|
tor
|
tor
|
Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers.
|
NVD-CWE-Other
|
CVE-2006-3412
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350388
|
5.0 |
MEDIUM
|
tor
|
tor
|
The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information.
|
NVD-CWE-Other
|
CVE-2006-3413
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350389
|
5.0 |
MEDIUM
|
tor
|
tor
|
Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution.
|
NVD-CWE-Other
|
CVE-2006-3414
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350390
|
6.4 |
MEDIUM
|
tor
|
tor
|
Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2006-3415
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350391
|
6.4 |
MEDIUM
|
tor
|
tor
|
Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard…
|
NVD-CWE-Other
|
CVE-2006-3417
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350392
|
5.0 |
MEDIUM
|
tor
|
tor
|
Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by user…
|
NVD-CWE-Other
|
CVE-2006-3418
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350393
|
5.0 |
MEDIUM
|
tor
|
tor
|
Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding,…
|
NVD-CWE-Other
|
CVE-2006-3419
|
2008-09-6 06:07 |
2006-07-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350394
|
5.0 |
MEDIUM
|
phpmaillist
|
phpmaillist
|
PHPMailList 1.8.0 stores sensitive information under the web document root iwth insufficient access control, which allows remote attackers to obtain email addresses of subscribers, configuration info…
|
NVD-CWE-Other
|
CVE-2006-3483
|
2008-09-6 06:07 |
2006-07-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350395
|
5.0 |
MEDIUM
|
virtuastore
|
virtuastore
|
VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuasto…
|
NVD-CWE-Other
|
CVE-2006-3487
|
2008-09-6 06:07 |
2006-07-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350396
|
5.0 |
MEDIUM
|
virtuastore
|
virtuastore
|
Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in…
|
NVD-CWE-Other
|
CVE-2006-3488
|
2008-09-6 06:07 |
2006-07-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350397
|
7.5 |
HIGH
|
sensesites
|
commonsense_cms
|
SQL injection vulnerability in search.php in SenseSites CommonSense CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the Date parameter. NOTE: the provenance of this information…
|
NVD-CWE-Other
|
CVE-2006-3576
|
2008-09-6 06:07 |
2006-07-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350398
|
7.5 |
HIGH
|
lifetype
|
lifetype
|
SQL injection vulnerability in index.php in LifeType 1.0.5 allows remote attackers to execute arbitrary SQL commands via the Date parameter in a Default op.
|
NVD-CWE-Other
|
CVE-2006-3577
|
2008-09-6 06:07 |
2006-07-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350399
|
5.0 |
MEDIUM
|
fujitsu
|
serverview
|
Directory traversal vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to read arbitrary files via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2006-3578
|
2008-09-6 06:07 |
2006-07-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350400
|
4.3 |
MEDIUM
|
fujitsu
|
serverview
|
Cross-site scripting (XSS) vulnerability in Fujitsu ServerView 2.50 up to 3.60L98 and 4.10L11 up to 4.11L81 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
クロスサイト・スクリプティング（XSS）
|
CVE-2006-3579
|
2008-09-6 06:07 |
2006-07-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
