|
355201
|
4.3 |
MEDIUM
|
ibm
|
webi
|
Multiple cross-site scripting (XSS) vulnerabilities in the IBM Web Interface for Content Management (aka WEBi) before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecifi…
|
CWE-79
クロスサイト・スクリプティング（XSS）
|
CVE-2010-1242
|
2011-04-7 12:18 |
2010-04-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355202
|
7.5 |
HIGH
|
ibm
|
webi
|
The IBM Web Interface for Content Management (aka WEBi) before 1.0.4 creates persistent cookies on client workstations, which has unspecified impact and attack vectors.
|
NVD-CWE-noinfo
|
CVE-2010-1243
|
2011-04-7 12:18 |
2010-04-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355203
|
4.3 |
MEDIUM
|
apple
|
safari
webkit
|
The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle the :visited …
|
CWE-200
情報漏えい
|
CVE-2010-2264
|
2011-03-18 11:50 |
2010-06-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355204
|
7.2 |
HIGH
|
apple
|
itunes
|
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
|
CWE-264
認可・権限・アクセス制御
|
CVE-2005-2938
|
2011-03-10 14:00 |
2005-11-18 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355205
|
5.8 |
MEDIUM
|
django_project
|
django
|
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to con…
|
CWE-352
同一生成元ポリシー違反
|
CVE-2008-3909
|
2011-03-8 12:11 |
2008-09-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355206
|
7.5 |
HIGH
|
cchost
|
cchost
|
SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID. NOTE: Some…
|
NVD-CWE-Other
|
CVE-2006-4778
|
2011-03-8 11:42 |
2006-09-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355207
|
6.2 |
MEDIUM
|
roxio
|
toast
|
Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are execu…
|
CWE-362
競合状態
|
CVE-2006-4801
|
2011-03-8 11:42 |
2006-09-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355208
|
10.0 |
HIGH
|
iodine
|
iodine
|
Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to "potential security problems."
|
NVD-CWE-Other
|
CVE-2006-4831
|
2011-03-8 11:42 |
2006-09-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355209
|
10.0 |
HIGH
|
iodine
|
iodine
|
This vulnerability is addressed in the following product release:
Iodine, Iodine, 0.3.2
|
NVD-CWE-Other
|
CVE-2006-4831
|
2011-03-8 11:42 |
2006-09-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355210
|
5.1 |
MEDIUM
|
joomla
|
joomla
|
Unspecified vulnerability in com_content in Joomla! before 1.0.11, when $mosConfig_hideEmail is set, allows attackers to perform the emailform and emailsend tasks.
|
NVD-CWE-Other
|
CVE-2006-4473
|
2011-03-8 11:41 |
2006-09-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355211
|
7.5 |
HIGH
|
joomla
|
joomla
|
Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors.
|
CWE-264
認可・権限・アクセス制御
|
CVE-2006-4475
|
2011-03-8 11:41 |
2006-09-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355212
|
7.5 |
HIGH
|
joomla
|
joomla
|
Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to "Injection Flaws," allow attackers to have an unknown impact via (1) globals.php, which uses include_once() instead of requir…
|
CWE-94
CWE-264
コード・インジェクション
認可・権限・アクセス制御
|
CVE-2006-4476
|
2011-03-8 11:41 |
2006-09-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355213
|
7.2 |
HIGH
|
ibm
|
aix
|
Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2006-4522
|
2011-03-8 11:41 |
2006-09-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355214
|
6.8 |
MEDIUM
|
vtiger
|
vtiger_crm
|
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) description parameter in unspe…
|
NVD-CWE-Other
|
CVE-2006-4587
|
2011-03-8 11:41 |
2006-09-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355215
|
7.5 |
HIGH
|
vtiger
|
vtiger_crm
|
vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modules via a direct request to index.php with a modified module parameter, as demon…
|
NVD-CWE-Other
|
CVE-2006-4588
|
2011-03-8 11:41 |
2006-09-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355216
|
7.5 |
HIGH
|
bare_concept_media
|
pheap_cms
|
PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenan…
|
NVD-CWE-Other
|
CVE-2006-4621
|
2011-03-8 11:41 |
2006-09-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355217
|
7.5 |
HIGH
|
alwil
|
avast_antivirus
|
Heap-based buffer overflow in alwil avast! Anti-virus Engine before 4.7.869 allows remote attackers to execute arbitrary code via a crafted LHA file that contains extended headers with file and direc…
|
NVD-CWE-Other
|
CVE-2006-4626
|
2011-03-8 11:41 |
2006-09-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355218
|
7.5 |
HIGH
|
alwil
|
avast_antivirus
|
This vulnerability is addressed in the following product releases:
ALWIL, avast! antivirus, 4.7.869 (for Desktops)
ALWIL, avast! antivirus, Server 4.7.660 (for Servers)
|
NVD-CWE-Other
|
CVE-2006-4626
|
2011-03-8 11:41 |
2006-09-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355219
|
7.5 |
HIGH
|
uni-vert
|
phpleague
|
SQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQL commands via the id_joueur parameter. NOTE: the provenance …
|
NVD-CWE-Other
|
CVE-2006-4643
|
2011-03-8 11:41 |
2006-09-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355220
|
5.0 |
MEDIUM
|
ibm
|
director
|
Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (crash) via unspecified vectors involving (1) malformed WMI CIM server requests an…
|
NVD-CWE-Other
|
CVE-2006-4682
|
2011-03-8 11:41 |
2006-09-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355221
|
5.0 |
MEDIUM
|
ibm
|
director
|
This vulnerability is addressed in the following product release:
IBM, Director, 5.10
|
NVD-CWE-Other
|
CVE-2006-4682
|
2011-03-8 11:41 |
2006-09-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355222
|
5.0 |
MEDIUM
|
ibm
|
director
|
IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.
|
NVD-CWE-Other
|
CVE-2006-4683
|
2011-03-8 11:41 |
2006-09-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355223
|
5.0 |
MEDIUM
|
zope
|
zope
|
The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary…
|
NVD-CWE-Other
|
CVE-2006-4684
|
2011-03-8 11:41 |
2006-09-20 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355224
|
7.5 |
HIGH
|
drupal
|
drupal_pubcookie_module
|
The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentica…
|
NVD-CWE-Other
|
CVE-2006-4717
|
2011-03-8 11:41 |
2006-09-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355225
|
7.5 |
HIGH
|
drupal
|
drupal_pubcookie_module
|
Drupal core is not affected. If you do not use the pubcookie module, no action is necessary.
|
NVD-CWE-Other
|
CVE-2006-4717
|
2011-03-8 11:41 |
2006-09-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355226
|
5.0 |
MEDIUM
|
symantec
|
brightmail_antispam
|
Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service (application freeze) "by sendin…
|
NVD-CWE-Other
|
CVE-2006-4014
|
2011-03-8 11:40 |
2006-08-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355227
|
4.3 |
MEDIUM
|
toenda_software_development
|
toendacms
|
Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s pa…
|
NVD-CWE-Other
|
CVE-2006-4016
|
2011-03-8 11:40 |
2006-08-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355228
|
4.6 |
MEDIUM
|
intel
|
2100_proset_wireless
|
Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execute code via "requests for capabilities from higher-level protocol drivers or user…
|
NVD-CWE-Other
|
CVE-2006-4022
|
2011-03-8 11:40 |
2006-08-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355229
|
7.5 |
HIGH
|
festalon
|
festalon
|
The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr…
|
NVD-CWE-Other
|
CVE-2006-4024
|
2011-03-8 11:40 |
2006-08-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355230
|
5.0 |
MEDIUM
|
gallery_project
|
gallery
|
Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bu…
|
NVD-CWE-Other
|
CVE-2006-4030
|
2011-03-8 11:40 |
2006-08-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355231
|
5.0 |
MEDIUM
|
gallery_project
|
gallery
|
Update to version 1.5-pl1.
|
NVD-CWE-Other
|
CVE-2006-4030
|
2011-03-8 11:40 |
2006-08-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355232
|
10.0 |
HIGH
|
fenestrae
|
faxination_server
|
Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafted packet.
|
NVD-CWE-Other
|
CVE-2006-4037
|
2011-03-8 11:40 |
2006-08-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355233
|
7.5 |
HIGH
|
ehmig
|
me_download_system
|
Multiple PHP remote file inclusion vulnerabilities in ME Download System 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) Vb8878b936c2bd8ae0cab parameter to (a) inc/sett_…
|
NVD-CWE-Other
|
CVE-2006-4054
|
2011-03-8 11:40 |
2006-08-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355234
|
5.1 |
MEDIUM
|
wim_fleischhauer
|
docpile_we
|
Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parame…
|
NVD-CWE-Other
|
CVE-2006-4076
|
2011-03-8 11:40 |
2006-08-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355235
|
5.1 |
MEDIUM
|
wim_fleischhauer
|
docpile_we
|
Successful exploitation requires that "register_globals" is enabled.
|
NVD-CWE-Other
|
CVE-2006-4076
|
2011-03-8 11:40 |
2006-08-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355236
|
4.3 |
MEDIUM
|
ozjournals
|
ozjournals
|
Cross-site scripting (XSS) vulnerability in index.php in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.…
|
NVD-CWE-Other
|
CVE-2006-4086
|
2011-03-8 11:40 |
2006-08-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355237
|
7.5 |
HIGH
|
ibm
|
websphere_application_server
|
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadId…
|
CWE-200
CWE-264
情報漏えい
認可・権限・アクセス制御
|
CVE-2006-4136
|
2011-03-8 11:40 |
2006-08-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355238
|
5.0 |
MEDIUM
|
ibm
|
websphere_application_server
|
IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command l…
|
NVD-CWE-Other
|
CVE-2006-4137
|
2011-03-8 11:40 |
2006-08-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355239
|
7.5 |
HIGH
|
invision_power_services
|
invision_power_board
|
Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to "access posts outside the topic."
|
NVD-CWE-Other
|
CVE-2006-4155
|
2011-03-8 11:40 |
2006-08-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355240
|
5.0 |
MEDIUM
|
ibm
|
websphere_application_server
|
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identifi…
|
NVD-CWE-Other
|
CVE-2006-4222
|
2011-03-8 11:40 |
2006-08-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355241
|
5.0 |
MEDIUM
|
twiki
|
twiki
|
Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
|
NVD-CWE-Other
|
CVE-2006-4294
|
2011-03-8 11:40 |
2006-09-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355242
|
5.0 |
MEDIUM
|
cgi-rescue
|
mail_f_w_system
|
CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.…
|
NVD-CWE-Other
|
CVE-2006-4344
|
2011-03-8 11:40 |
2006-08-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355243
|
6.4 |
MEDIUM
|
doctor_web_ltd
|
dr.web
|
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header tha…
|
NVD-CWE-Other
|
CVE-2006-4438
|
2011-03-8 11:40 |
2006-09-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355244
|
7.5 |
HIGH
|
ay_system_solutions
|
ay_system_solutions_cms
|
Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path[ShowProcessHandle] parameter t…
|
NVD-CWE-Other
|
CVE-2006-4441
|
2011-03-8 11:40 |
2006-08-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355245
|
6.8 |
MEDIUM
|
clemens_wacha
|
php_iaddressbook
|
Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via the cat_name parameter, related to adding a category. (cate…
|
NVD-CWE-Other
|
CVE-2006-4442
|
2011-03-8 11:40 |
2006-08-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355246
|
7.2 |
HIGH
|
x.org
|
emu-linux-x87-xlibs
x11r6
x11r7
xdm
xf86dga
xinit
xload
xorg-server
xterm
|
X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow…
|
NVD-CWE-Other
|
CVE-2006-4447
|
2011-03-8 11:40 |
2006-08-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355247
|
7.5 |
HIGH
|
cj_design
|
cj_tag_board
|
Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the (1) User-Agent HTTP header in tag.php, which is executed by all.php, and (…
|
NVD-CWE-Other
|
CVE-2006-4451
|
2011-03-8 11:40 |
2006-08-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355248
|
7.5 |
HIGH
|
phpecard
|
phpecard
|
PHP remote file inclusion vulnerability in index.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. NOTE: the provenance…
|
NVD-CWE-Other
|
CVE-2006-4457
|
2011-03-8 11:40 |
2006-08-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355249
|
10.0 |
HIGH
|
sybase
|
financial_fusion_consumer_banking_solution
|
Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors.
|
NVD-CWE-Other
|
CVE-2006-3667
|
2011-03-8 11:39 |
2006-07-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355250
|
7.5 |
HIGH
|
hyper_estraier
|
hyper_estraier
|
Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via u…
|
NVD-CWE-Other
|
CVE-2006-3671
|
2011-03-8 11:39 |
2006-07-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
