CVE List

Id CVE No. Status Description Phase Votes Comments Actions
25088  CVE-2007-1731  Candidate  Multiple stack-based buffer overflows in High Performance Anonymous FTP Server (hpaftpd) 1.01 allow remote attackers to execute arbitrary code via long arguments to the (1) USER, (2) PASS, (3) CWD, (4) MKD, (5) RMD, (6) DELE, (7) RNFR, or (8) RNTO FTP command.  Assigned (20070327)  None (candidate not yet proposed)    View
90624  CVE-2016-3805  Candidate  The MediaTek power management driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28333002 and MediaTek internal bug ALPS02694412.  Assigned (20160330)  None (candidate not yet proposed)    View
25344  CVE-2007-1987  Candidate  ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) _plugin_file parameter to smarty/internals/core.load_pulgins.php or the (2) root_path parameter to index.php. NOTE: CVE disputes (1) because the inclusion occurs within a function that is not called during a direct request. CVE disputes (2) because root_path is defined in config.php before use.  Assigned (20070411)  None (candidate not yet proposed)    View
90880  CVE-2016-4061  Candidate  Foxit Reader and PhantomPDF before 7.3.4 on Windows allow remote attackers to cause a denial of service (application crash) via a crafted content stream.  Assigned (20160422)  None (candidate not yet proposed)    View
25600  CVE-2007-2243  Candidate  OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KEY, which displays a different response if the user account exists, a similar issue to CVE-2001-1483.  Assigned (20070425)  None (candidate not yet proposed)    View

Page 1195 of 20943, showing 5 records out of 104715 total, starting on record 5971, ending on 5975

Actions