CVE List

Id CVE No. Status Description Phase Votes Comments Actions
29163  CVE-2007-5806  Candidate  Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the (1) mailing or (2) forum component, as demonstrated using the style and onmouseover HTML attributes.  Assigned (20071105)  None (candidate not yet proposed)    View
94699  CVE-2016-7879  Candidate  Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object. Successful exploitation could lead to arbitrary code execution.  Assigned (20160909)  None (candidate not yet proposed)    View
29419  CVE-2007-6062  Candidate  irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command without a channel argument.  Assigned (20071120)  None (candidate not yet proposed)    View
94955  CVE-2016-8135  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20160909)  None (candidate not yet proposed)    View
29675  CVE-2007-6318  Candidate  SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "" in a multibyte character.  Assigned (20071211)  None (candidate not yet proposed)    View

Page 19305 of 20943, showing 5 records out of 104715 total, starting on record 96521, ending on 96525

Actions