CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
12274 | CVE-2005-1068 | Candidate | Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags. | Assigned (20050412) | None (candidate not yet proposed) | View | |
77810 | CVE-2015-0547 | Candidate | The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors. | Assigned (20141217) | None (candidate not yet proposed) | View | |
12530 | CVE-2005-1324 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters. | Assigned (20050427) | None (candidate not yet proposed) | View | |
78066 | CVE-2015-0803 | Candidate | The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element"s attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document. | Assigned (20150107) | None (candidate not yet proposed) | View | |
12786 | CVE-2005-1580 | Candidate | users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code. | Assigned (20050514) | None (candidate not yet proposed) | View |
Page 18719 of 20943, showing 5 records out of 104715 total, starting on record 93591, ending on 93595