CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 19726 | CVE-2006-3622 | Candidate | The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a " (single quote) in the p parameter, which displays the path in an error message. NOTE: it is not clear whether this is SQL injection or a forced SQL error. | Assigned (20060714) | None (candidate not yet proposed) | View | |
| 85262 | CVE-2015-7985 | Candidate | Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file. | Assigned (20151027) | None (candidate not yet proposed) | View | |
| 19982 | CVE-2006-3878 | Candidate | Opsware Network Automation System (NAS) 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql. | Assigned (20060726) | None (candidate not yet proposed) | View | |
| 85518 | CVE-2015-8241 | Candidate | The xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context-dependent attackers to cause a denial of service (heap-based buffer over-read and application crash) or obtain sensitive information via crafted XML data. | Assigned (20151118) | None (candidate not yet proposed) | View | |
| 20238 | CVE-2006-4134 | Candidate | Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. | Assigned (20060814) | None (candidate not yet proposed) | View |
Page 1529 of 20943, showing 5 records out of 104715 total, starting on record 7641, ending on 7645
