CVE List

Id CVE No. Status Description Phase Votes Comments Actions
23273  CVE-2006-7169  Candidate  PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[skin_dir] parameter.  Assigned (20070320)  None (candidate not yet proposed)    View
88809  CVE-2016-1990  Candidate  HPE ArcSight ESM 5.x before 5.6, 6.0, 6.5.x before 6.5C SP1 Patch 2, and 6.8c before P1, and ArcSight ESM Express before 6.9.1, allows local users to gain privileges for command execution via unspecified vectors.  Assigned (20160122)  None (candidate not yet proposed)    View
23529  CVE-2007-0172  Candidate  Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMG_serverpath parameter to (1) comments.php and (2) signin.php; and possibly via a URL in unspecified parameters to (3) include/submit.inc.php, (4) admin/index.php, (5) include/cm_submit.inc.php, and (6) index.php.  Assigned (20070110)  None (candidate not yet proposed)    View
89065  CVE-2016-2246  Candidate  HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors.  Assigned (20160208)  None (candidate not yet proposed)    View
23785  CVE-2007-0428  Candidate  Unspecified vulnerability in the chtbl_lookup function in hash.c for WzdFTPD 8.0 and earlier allows remote attackers to cause a denial of service via a crafted FTP command, probably due to a NULL pointer dereference.  Assigned (20070122)  None (candidate not yet proposed)    View

Page 19165 of 20943, showing 5 records out of 104715 total, starting on record 95821, ending on 95825

Actions