CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 34026 | CVE-2008-3909 | Candidate | The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and delete or modify data via unspecified requests. | Assigned (20080904) | None (candidate not yet proposed) | View | |
| 99562 | CVE-2017-2742 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20161201) | None (candidate not yet proposed) | View | |
| 34282 | CVE-2008-4165 | Candidate | admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string. | Assigned (20080922) | None (candidate not yet proposed) | View | |
| 99818 | CVE-2017-2998 | Candidate | Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution. | Assigned (20161202) | None (candidate not yet proposed) | View | |
| 34538 | CVE-2008-4421 | Candidate | Directory traversal vulnerability in MetaGauge 1.0.0.17, and probably other versions before 1.0.3.38, allows remote attackers to read arbitrary files via a ".." (dot dot backslash) in the URL. | Assigned (20081003) | None (candidate not yet proposed) | View |
Page 18634 of 20943, showing 5 records out of 104715 total, starting on record 93166, ending on 93170
