CVE List

Id CVE No. Status Description Phase Votes Comments Actions
96227  CVE-2016-9407  Candidate  Cross-site scripting (XSS) vulnerability in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 might allow remote attackers to inject arbitrary web script or HTML via vectors involving Mod control panel logs.  Assigned (20161117)  None (candidate not yet proposed)    View
30947  CVE-2008-0830  Candidate  The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malformed dpap: URI, a different vulnerability than CVE-2008-0043.  Assigned (20080219)  None (candidate not yet proposed)    View
96483  CVE-2016-9663  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20161129)  None (candidate not yet proposed)    View
31203  CVE-2008-1086  Candidate  The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.  Assigned (20080228)  None (candidate not yet proposed)    View
96739  CVE-2016-9919  Candidate  The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to cause a denial of service (panic) via a fragmented IPv6 packet.  Assigned (20161208)  None (candidate not yet proposed)    View

Page 18682 of 20943, showing 5 records out of 104715 total, starting on record 93406, ending on 93410

Actions