CVE List

Id CVE No. Status Description Phase Votes Comments Actions
41458  CVE-2009-4023  Candidate  Argument injection vulnerability in the sendmail implementation of the Mail::Send method (Mail/sendmail.php) in the Mail package 1.1.14 for PEAR allows remote attackers to read and write arbitrary files via a crafted $from parameter, a different vector than CVE-2009-4111.  Assigned (20091120)  None (candidate not yet proposed)    View
41714  CVE-2009-4279  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20091210)  None (candidate not yet proposed)    View
41970  CVE-2009-4535  Candidate  Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / (slash) character to the URI.  Assigned (20091231)  None (candidate not yet proposed)    View
42226  CVE-2009-4791  Candidate  Multiple SQL injection vulnerabilities in Family Connections (aka FCMS) before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to addressbook.php, (2) id parameter to recipes.php, (3) year parameter to register.php, (4) poll_id parameter to home.php, and (5) email parameter to lostpw.php.  Assigned (20100422)  None (candidate not yet proposed)    View
42482  CVE-2009-5047  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20110114)  None (candidate not yet proposed)    View

Page 18763 of 20943, showing 5 records out of 104715 total, starting on record 93811, ending on 93815

Actions