CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
14594 | CVE-2005-3388 | Candidate | Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment." | Assigned (20051101) | None (candidate not yet proposed) | View | |
80130 | CVE-2015-2853 | Candidate | Session fixation vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 allows remote attackers to hijack web sessions by providing a session ID. | Assigned (20150403) | None (candidate not yet proposed) | View | |
14850 | CVE-2005-3646 | Candidate | Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in (1) logout.php and (2) index.php. | Assigned (20051117) | None (candidate not yet proposed) | View | |
80386 | CVE-2015-3109 | Candidate | Adobe Photoshop CC before 16.0 (aka 2015.0.0) allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. | Assigned (20150409) | None (candidate not yet proposed) | View | |
15106 | CVE-2005-3902 | Candidate | Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 through 2.4.6.2 allows remote attackers to inject arbitrary web script or HTML via query strings that are included in an error message, as demonstrated using a parameter containing script. | Assigned (20051129) | None (candidate not yet proposed) | View |
Page 181 of 20943, showing 5 records out of 104715 total, starting on record 901, ending on 905