CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
91366 | CVE-2016-4547 | Candidate | Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C. | Assigned (20160505) | None (candidate not yet proposed) | View | |
26086 | CVE-2007-2729 | Candidate | Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier. | Assigned (20070516) | None (candidate not yet proposed) | View | |
91622 | CVE-2016-4803 | Candidate | CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject. | Assigned (20160513) | None (candidate not yet proposed) | View | |
26342 | CVE-2007-2985 | Candidate | Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator"s username, which can be used to (1) obtain sensitive information, including the administrator password, via settings.php or (2) upload and execute arbitrary PHP code via an update_doc action in edit.php. | Assigned (20070531) | None (candidate not yet proposed) | View | |
91878 | CVE-2016-5059 | Candidate | OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application. | Assigned (20160526) | None (candidate not yet proposed) | View |
Page 18898 of 20943, showing 5 records out of 104715 total, starting on record 94486, ending on 94490