Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-03-09 | CVE-2006-1118 | SQL-Injection vulnerability in Bmail Pr9.0 SQL injection vulnerability in bmail before Aardvark PR9.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving GBK character sets. | 5.0 |
| 2006-03-09 | CVE-2006-1117 | Unspecified vulnerability in Ncipher products nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force. | 2.6 |
| 2006-03-09 | CVE-2006-1116 | Unspecified vulnerability in Ncipher Ncore 2.17 The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected. | 5.0 |
| 2006-03-09 | CVE-2006-1115 | Unspecified vulnerability in Ncipher Chil, Mscapi CSP and Ncipher Software CD nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack. | 2.6 |
| 2006-03-09 | CVE-2006-1114 | Input Validation vulnerability in Gerrit VAN Aaken Loudblog 0.41 Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. | 6.4 |
| 2006-03-09 | CVE-2006-1113 | Input Validation vulnerability in Gerrit VAN Aaken Loudblog 0.41 SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 5.0 |
| 2006-03-09 | CVE-2006-1112 | HTML Injection vulnerability in Aztek Forum Aztek Forum 4.0 Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message. | 5.0 |
| 2006-03-09 | CVE-2006-1111 | HTML Injection vulnerability in Aztek Forum Aztek Forum 4.0 Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection. | 7.5 |
| 2006-03-09 | CVE-2006-1110 | HTML Injection vulnerability in Aztek Forum Aztek Forum 4.0 Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message. network aztek-forum | 4.3 |
| 2006-03-09 | CVE-2006-1109 | SQL Injection vulnerability in Totalecommerce 1.0 SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |