CVE List

Id CVE No. Status Description Phase Votes Comments Actions
90369  CVE-2016-3550  Candidate  Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.  Assigned (20160317)  None (candidate not yet proposed)    View
25089  CVE-2007-1732  Candidate  ** DISPUTED ** Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the demo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: another researcher disputes this issue, stating that this is legitimate functionality for administrators. However, it has been patched by at least one vendor.  Assigned (20070328)  None (candidate not yet proposed)    View
90625  CVE-2016-3806  Candidate  The MediaTek display driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28402341 and MediaTek internal bug ALPS02715341.  Assigned (20160330)  None (candidate not yet proposed)    View
25345  CVE-2007-1988  Candidate  Cross-site scripting (XSS) vulnerability in kernel/filters.inc.php in PHPEcho CMS 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  Assigned (20070411)  None (candidate not yet proposed)    View
90881  CVE-2016-4062  Candidate  Foxit Reader and PhantomPDF before 7.3.4 on Windows improperly report format errors recursively, which allows remote attackers to cause a denial of service (application hang) via a crafted PDF.  Assigned (20160422)  None (candidate not yet proposed)    View

Page 149 of 20943, showing 5 records out of 104715 total, starting on record 741, ending on 745

Actions