CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
29163 | CVE-2007-5806 | Candidate | Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the (1) mailing or (2) forum component, as demonstrated using the style and onmouseover HTML attributes. | Assigned (20071105) | None (candidate not yet proposed) | View | |
94699 | CVE-2016-7879 | Candidate | Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the NetConnection class when handling an attached script object. Successful exploitation could lead to arbitrary code execution. | Assigned (20160909) | None (candidate not yet proposed) | View | |
29419 | CVE-2007-6062 | Candidate | irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command without a channel argument. | Assigned (20071120) | None (candidate not yet proposed) | View | |
94955 | CVE-2016-8135 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20160909) | None (candidate not yet proposed) | View | |
29675 | CVE-2007-6318 | Candidate | SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the s parameter, when DB_CHARSET is set to (1) Big5, (2) GBK, or possibly other character set encodings that support a "" in a multibyte character. | Assigned (20071211) | None (candidate not yet proposed) | View |
Page 19305 of 20943, showing 5 records out of 104715 total, starting on record 96521, ending on 96525