CVE List

Id CVE No. Status Description Phase Votes Comments Actions
93719  CVE-2016-6899  Candidate  The Intelligent Baseboard Management Controller (iBMC) in Huawei RH1288 V3 servers with software before V100R003C00SPC613, RH2288 V3 servers with software before V100R003C00SPC617, RH2288H V3 servers with software before V100R003C00SPC515, RH5885 V3 servers with software before V100R003C10SPC102, and XH620 V3, XH622 V3, and XH628 V3 servers with software before V100R003C00SPC610 might allow remote attackers to decrypt encrypted data and consequently obtain sensitive information by leveraging selection of an insecure SSL encryption algorithm.  Assigned (20160822)  None (candidate not yet proposed)    View
28439  CVE-2007-5082  Candidate  Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.  Assigned (20070925)  None (candidate not yet proposed)    View
93975  CVE-2016-7155  Candidate  hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.  Assigned (20160906)  None (candidate not yet proposed)    View
28695  CVE-2007-5338  Candidate  Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script to be executed when a chrome action is performed.  Assigned (20071010)  None (candidate not yet proposed)    View
94231  CVE-2016-7411  Candidate  ext/standard/var_unserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an unserialize call that references a partially constructed object.  Assigned (20160909)  None (candidate not yet proposed)    View

Page 1848 of 20943, showing 5 records out of 104715 total, starting on record 9236, ending on 9240

Actions