CVE List

Id CVE No. Status Description Phase Votes Comments Actions
25365  CVE-2007-2008  Candidate  Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.  Assigned (20070412)  None (candidate not yet proposed)    View
90901  CVE-2016-4082  Candidate  epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and application crash) via a crafted packet.  Assigned (20160424)  None (candidate not yet proposed)    View
25621  CVE-2007-2264  Candidate  Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allows remote attackers to execute arbitrary code via a RAM (.ra or .ram) file with a large size value in the RA header.  Assigned (20070425)  None (candidate not yet proposed)    View
91157  CVE-2016-4338  Candidate  The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.  Assigned (20160427)  None (candidate not yet proposed)    View
25877  CVE-2007-2520  Candidate  SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the authacc cookie.  Assigned (20070507)  None (candidate not yet proposed)    View

Page 1708 of 20943, showing 5 records out of 104715 total, starting on record 8536, ending on 8540

Actions