SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Max CVSS
7.5
EPSS Score
0.07%
Published
2006-12-31
Updated
2017-08-08
Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0.
Max CVSS
10.0
EPSS Score
90.99%
Published
2006-12-31
Updated
2021-04-07
Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unknown vectors related to "crafted input."
Max CVSS
7.5
EPSS Score
0.27%
Published
2006-12-31
Updated
2008-09-05
Unspecified vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to upload arbitrary PHP scripts via unspecified vectors.
Max CVSS
7.5
EPSS Score
1.10%
Published
2006-12-31
Updated
2011-03-08
SQL injection vulnerability in phpMyFAQ 1.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the userfile or filename parameter.
Max CVSS
7.5
EPSS Score
1.04%
Published
2006-12-31
Updated
2017-07-29
formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with Abfrage, allows remote attackers to cause a denial of service (daemon crash) via multiple requests containing many /../ sequences in the Name parameter.
Max CVSS
7.8
EPSS Score
1.15%
Published
2006-12-31
Updated
2017-10-19
Stack-based buffer overflow in http.c in Karl Dahlke Edbrowse (aka Command line editor browser) 3.1.3 allows remote attackers to execute arbitrary code by operating an FTP server that sends directory listings with (1) long user names or (2) long group names.
Max CVSS
10.0
EPSS Score
3.79%
Published
2006-12-31
Updated
2016-10-18
Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450, allows remote attackers to cause a denial of service (service crash) and possibly execute arbitrary code via unspecified vectors.
Max CVSS
10.0
EPSS Score
4.59%
Published
2006-12-31
Updated
2023-12-15
Unspecified vulnerability in the Bluesoil Bluetooth stack has unknown impact and attack vectors.
Max CVSS
10.0
EPSS Score
0.41%
Published
2006-12-31
Updated
2018-10-16
Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact and local attack vectors, related to "Mach Exception Handling", a different issue than CVE-2006-6900.
Max CVSS
7.2
EPSS Score
0.05%
Published
2006-12-31
Updated
2018-10-16
Unspecified vulnerability in the Widcomm Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.
Max CVSS
10.0
EPSS Score
1.54%
Published
2006-12-31
Updated
2018-10-16
Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.
Max CVSS
7.9
EPSS Score
0.72%
Published
2006-12-31
Updated
2018-10-16
Unspecified vulnerability in the Toshiba Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.
Max CVSS
10.0
EPSS Score
1.08%
Published
2006-12-31
Updated
2018-10-16
Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.
Max CVSS
10.0
EPSS Score
2.78%
Published
2006-12-31
Updated
2018-10-16
Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors.
Max CVSS
10.0
EPSS Score
2.78%
Published
2006-12-31
Updated
2018-10-16
Unspecified vulnerability in the Bluetooth stack in Apple Mac OS 10.4 has unknown impact and attack vectors, related to an "implementation bug."
Max CVSS
10.0
EPSS Score
0.41%
Published
2006-12-31
Updated
2018-10-16
Widcomm Bluetooth for Windows (BTW) before 4.0.1.1500 allows remote attackers to listen to and record conversations, aka the CarWhisperer attack.
Max CVSS
7.8
EPSS Score
0.74%
Published
2006-12-31
Updated
2018-10-16
Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown impact and attack vectors, related to (1) "Placeholders in database handler" and (2) "Macro admin security."
Max CVSS
10.0
EPSS Score
0.19%
Published
2006-12-31
Updated
2008-09-05
Voodoo chat 1.0RC1b stores sensitive information under the web root with insufficient access control, which allows remote attackers to download passwords via a direct request for data/users.dat.
Max CVSS
7.5
EPSS Score
2.94%
Published
2006-12-31
Updated
2017-10-19
FreeStyle Wiki (fswiki) 3.6.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request for config/user.dat.
Max CVSS
7.5
EPSS Score
3.77%
Published
2006-12-31
Updated
2017-10-19
Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 Build 6667 allows remote attackers to execute arbitrary code via a long argument to the CreateNewFolderFromName method, a different vulnerability than CVE-2006-5198.
Max CVSS
9.3
EPSS Score
30.17%
Published
2006-12-31
Updated
2018-10-17
PHP remote file inclusion vulnerability in php4you.php in PHPIrc_bot 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE, since the dir variable is declared before being used
Max CVSS
7.5
EPSS Score
0.78%
Published
2006-12-31
Updated
2024-03-21
Buffer overflow in the Get_Wep function in cofvnet.c for ATMEL Linux PCI PCMCIA USB Drivers drivers 3.4.1.1 corruption allows attackers to execute arbitrary code via a long name argument.
Max CVSS
7.5
EPSS Score
0.39%
Published
2006-12-31
Updated
2018-10-17
Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) newmessage, (2) newname, (3) newwebsite, or (4) newemail parameter.
Max CVSS
7.5
EPSS Score
0.14%
Published
2006-12-31
Updated
2017-10-19
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] parameter to 1 during a login action.
Max CVSS
7.5
EPSS Score
0.90%
Published
2006-12-31
Updated
2017-10-19
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!