CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 102409 | CVE-2017-5589 | Candidate | An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application"s display. This allows for various kinds of social engineering attacks. This CVE is for yaxim and Bruno (0.8.6 - 0.8.8; Android). | Assigned (20170125) | None (candidate not yet proposed) | View | |
| 37129 | CVE-2008-7012 | Candidate | courier/1000@/api_error_email.html (aka "error reporting page") in Accellion File Transfer Appliance FTA_7_0_178, and possibly other versions before FTA_7_0_189, allows remote attackers to send spam e-mail via modified description and client_email parameters. | Assigned (20090818) | None (candidate not yet proposed) | View | |
| 102665 | CVE-2017-5845 | Candidate | The gst_avi_demux_parse_ncdt function in gst/avi/gstavidemux.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause a denial of service (invalid memory read and crash) via a ncdt sub-tag that "goes behind" the surrounding tag. | Assigned (20170201) | None (candidate not yet proposed) | View | |
| 37385 | CVE-2008-7268 | Candidate | The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php. | Assigned (20101201) | None (candidate not yet proposed) | View | |
| 102921 | CVE-2017-6101 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170219) | None (candidate not yet proposed) | View |
Page 1386 of 20943, showing 5 records out of 104715 total, starting on record 6926, ending on 6930
