CVE List

Id CVE No. Status Description Phase Votes Comments Actions
12565  CVE-2005-1359  Candidate  Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.  Assigned (20050428)  None (candidate not yet proposed)    View
78101  CVE-2015-0838  Candidate  Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.  Assigned (20150107)  None (candidate not yet proposed)    View
12821  CVE-2005-1615  Candidate  viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability.  Assigned (20050516)  None (candidate not yet proposed)    View
78357  CVE-2015-1080  Candidate  WebKit, as used in Apple Safari before 6.2.4, 7.x before 7.1.4, and 8.x before 8.0.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other CVEs listed in APPLE-SA-2015-03-17-1.  Assigned (20150116)  None (candidate not yet proposed)    View
13077  CVE-2005-1871  Candidate  Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allows remote attackers to gain privileges, due to an "input check" that "is not implemented properly."  Assigned (20050608)  None (candidate not yet proposed)    View

Page 1688 of 20943, showing 5 records out of 104715 total, starting on record 8436, ending on 8440

Actions