CVE List

Id CVE No. Status Description Phase Votes Comments Actions
16099  CVE-2005-4895  Candidate  Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.  Assigned (20120725)  None (candidate not yet proposed)    View
81635  CVE-2015-4358  Candidate  Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.  Assigned (20150605)  None (candidate not yet proposed)    View
16355  CVE-2006-0251  Candidate  Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters.  Assigned (20060118)  None (candidate not yet proposed)    View
81891  CVE-2015-4614  Candidate  Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2m_img_save_map_name action to wp-admin/admin-ajax.php and other unspecified vectors.  Assigned (20150616)  None (candidate not yet proposed)    View
16611  CVE-2006-0507  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via (1) unknown attack vectors in the administrative interface and (2) input fields of the contact form.  Assigned (20060201)  None (candidate not yet proposed)    View

Page 18691 of 20943, showing 5 records out of 104715 total, starting on record 93451, ending on 93455

Actions