NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
60163 | CVE-2006-1454 | Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickDraw PICT image format file with malformed image data. | 2 | 5.1 | Medium | 2016-12-20 | 2011-03-07 | View | |
60419 | CVE-2006-1714 | CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter. | 2 | 7.5 | High | 2016-12-20 | 2008-09-05 | View | |
60675 | CVE-2006-1970 | Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter. | 2 | 4.3 | Medium | 2016-12-20 | 2011-03-07 | View | |
60931 | CVE-2006-2228 | Cross-site scripting (XSS) vulnerability in w-Agora (aka Web-Agora) 4.2.0 allows remote attackers to inject arbitrary web script or HTML via a post with a BBCode tag that contains a JavaScript event name followed by whitespace before the "=" (equals) character, which bypasses a restrictive regular expression that attempts to remove onmouseover and other events. | 2 | 4.3 | Medium | 2016-12-20 | 2008-09-05 | View | |
61187 | CVE-2006-2492 | Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack. | 2 | 7.6 | High | 2016-12-20 | 2011-03-07 | View |
Page 269 of 17672, showing 5 records out of 88360 total, starting on record 1341, ending on 1345