NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
72167 | CVE-2004-1788 | ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb. | 2 | 5 | Medium | 2016-12-20 | 2008-09-05 | View | |
72679 | CVE-2004-2302 | Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service (crash) via large offsets in sysfs files. | 2 | 2.6 | Low | 2016-12-20 | 2016-11-18 | View | |
58855 | CVE-2006-0115 | Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the (1) Press_Release_ID parameter in press/details.asp, (2) Service_ID parameter in services/details.asp, and (3) Product_ID parameter in products/details.asp. | 2 | 7.5 | High | 2016-12-20 | 2011-09-08 | View | |
59111 | CVE-2006-0372 | Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) blogphp_username or (2) blogphp_password parameter in a cookie. | 2 | 7.5 | High | 2016-12-20 | 2008-09-05 | View | |
59367 | CVE-2006-0636 | desktop.php in eyeOS 0.8.9 and earlier tests for the existence of the _SESSION variable before calling the session_start function, which allows remote attackers to execute arbitrary PHP code and possibly conduct other attacks by modifying critical assumed-immutable variables, as demonstrated using PHP code in the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable. | 2 | 7.5 | High | 2016-12-20 | 2011-03-07 | View |
Page 17528 of 17672, showing 5 records out of 88360 total, starting on record 87636, ending on 87640