CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
25365 | CVE-2007-2008 | Candidate | Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. | Assigned (20070412) | None (candidate not yet proposed) | View | |
90901 | CVE-2016-4082 | Candidate | epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and application crash) via a crafted packet. | Assigned (20160424) | None (candidate not yet proposed) | View | |
25621 | CVE-2007-2264 | Candidate | Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header. | Assigned (20070425) | None (candidate not yet proposed) | View | |
91157 | CVE-2016-4338 | Candidate | The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter. | Assigned (20160427) | None (candidate not yet proposed) | View | |
25877 | CVE-2007-2520 | Candidate | SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie. | Assigned (20070507) | None (candidate not yet proposed) | View |
Page 1708 of 20943, showing 5 records out of 104715 total, starting on record 8536, ending on 8540