CVE List

Id CVE No. Status Description Phase Votes Comments Actions
80641  CVE-2015-3364  Candidate  Cross-site scripting (XSS) vulnerability in the Content Analysis module before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a log message.  Assigned (20150421)  None (candidate not yet proposed)    View
15361  CVE-2005-4157  Candidate  Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled.  Assigned (20051211)  None (candidate not yet proposed)    View
80897  CVE-2015-3620  Candidate  Cross-site scripting (XSS) vulnerability in the advanced dataset reports page in Fortinet FortiAnalyzer 5.0.0 through 5.0.10 and 5.2.0 through 5.2.1 and FortiManager 5.0.3 through 5.0.10 and 5.2.0 through 5.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20150430)  None (candidate not yet proposed)    View
15617  CVE-2005-4413  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the (1) E-mail address field to (a) PlantsByWebSphere/login.jsp, (2) message field to (b) TechnologySample/BulletinBoard Script, (3) Email address field to (c) TechnologySamples/Subscription, and the (4) Movie Name, (5) Movie Reviewer, and (6) Movie Review fields to (d) TechnologySamples/MovieReview2_1.  Assigned (20051220)  None (candidate not yet proposed)    View
81153  CVE-2015-3876  Candidate  libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.  Assigned (20150512)  None (candidate not yet proposed)    View

Page 102 of 20943, showing 5 records out of 104715 total, starting on record 506, ending on 510

Actions