CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13545  CVE-2005-2339  Candidate  Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20050721)  None (candidate not yet proposed)    View
79081  CVE-2015-1804  Candidate  The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly perform type conversion for metrics values, which allows remote authenticated users to cause a denial of service (out-of-bounds memory access) and possibly execute arbitrary code via a crafted BDF font file.  Assigned (20150217)  None (candidate not yet proposed)    View
13801  CVE-2005-2595  Candidate  Cross-site scripting (XSS) vulnerability in Dada Mail before 2.10 Alpha 1 allows remote attackers to execute arbitrary Javascript via archived messages.  Assigned (20050817)  None (candidate not yet proposed)    View
79337  CVE-2015-2060  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20150223)  None (candidate not yet proposed)    View
14057  CVE-2005-2851  Candidate  smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the (1) smb4k.tmp or (2) sudoers temporary files.  Assigned (20050908)  None (candidate not yet proposed)    View

Page 19132 of 20943, showing 5 records out of 104715 total, starting on record 95656, ending on 95660

Actions