CVE List

Id CVE No. Status Description Phase Votes Comments Actions
22274  CVE-2006-6170  Candidate  Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815.  Assigned (20061130)  None (candidate not yet proposed)    View
87810  CVE-2016-10290  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170328)  None (candidate not yet proposed)    View
22530  CVE-2006-6426  Candidate  PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the template_file parameter.  Assigned (20061209)  None (candidate not yet proposed)    View
88066  CVE-2016-1247  Candidate  The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu1.1 on Ubuntu 16.10, and the nginx ebuild before 1.10.2-r3 on Gentoo allow local users with access to the web server user account to gain root privileges via a symlink attack on the error log.  Assigned (20151227)  None (candidate not yet proposed)    View
22786  CVE-2006-6682  Candidate  Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remote attackers to determine valid usernames on the system.  Assigned (20061221)  None (candidate not yet proposed)    View

Page 193 of 20943, showing 5 records out of 104715 total, starting on record 961, ending on 965

Actions