Vulnerability_Archives

CVE_ARCHIVES.DB

ARCHIVE_CHRONOLOGY.INDEXSTATUS: ONLINE

Risk_Filter:

Records: 6,659

Mode: SECURE_QUERY

CVE-2006-1305

MEDIUM

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail reco

Discovered

Dec 31, 2006

CVE-2006-3432

UNKNOWN

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-0028. Reason: This candidate is a reservation duplicate of CVE-2007-0028. T

Discovered

Dec 31, 2006

CVE-2006-4097

HIGH

Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engin

Discovered

Dec 31, 2006

CVE-2006-4098

HIGH

Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before

Discovered

Dec 31, 2006

CVE-2006-4220

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers

Discovered

Dec 31, 2006

CVE-2006-4575

HIGH

Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) fi

Discovered

Dec 31, 2006

CVE-2006-4576

MEDIUM

Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web script or HTML by uploading the HTM

Discovered

Dec 31, 2006

CVE-2006-4577

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javasc

Discovered

Dec 31, 2006

CVE-2006-4578

HIGH

export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database con

Discovered

Dec 31, 2006

CVE-2006-4579

MEDIUM

Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot dot) in the

Discovered

Dec 31, 2006

CVE-2006-4580

HIGH

register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by sett

Discovered

Dec 31, 2006

CVE-2006-4581

MEDIUM

Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote att

Discovered

Dec 31, 2006

CVE-2006-4582

MEDIUM

Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other users via u

Discovered

Dec 31, 2006

CVE-2006-4695

HIGH

Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary co

Discovered

Dec 31, 2006

CVE-2006-4727

MEDIUM

Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versio

Discovered

Dec 31, 2006

CVE-2006-5265

MEDIUM

Unspecified vulnerability in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allows remote attackers to cause a denial of service (crash

Discovered

Dec 31, 2006

CVE-2006-5266

HIGH

Multiple buffer overflows in Microsoft Dynamics GP (formerly Great Plains) 9.0 and earlier allow remote attackers to execute arbitrary code via (1) a

Discovered

Dec 31, 2006

CVE-2006-5574

HIGH

Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project

Discovered

Dec 31, 2006

CVE-2006-5749

LOW

The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux 2.4 kernel before 2.4.34-rc4 does not call the init_timer function

Discovered

Dec 31, 2006

CVE-2006-5755

MEDIUM

Linux kernel before 2.6.18, when running on x86_64 systems, does not properly save or restore EFLAGS during a context switch, which allows local users

Discovered

Dec 31, 2006

...