CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
93675 | CVE-2016-6855 | Candidate | Eye of GNOME (aka eog) 3.16.5, 3.17.x, 3.18.x before 3.18.3, 3.19.x, and 3.20.x before 3.20.4, when used with glib before 2.44.1, allow remote attackers to cause a denial of service (out-of-bounds write and crash) via vectors involving passing invalid UTF-8 to GMarkup. | Assigned (20160818) | None (candidate not yet proposed) | View | |
28395 | CVE-2007-5038 | Candidate | The offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value of the createemailregexp parameter, which allows remote attackers to bypass intended restrictions on account creation. | Assigned (20070923) | None (candidate not yet proposed) | View | |
93931 | CVE-2016-7111 | Candidate | MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors. | Assigned (20160829) | None (candidate not yet proposed) | View | |
28651 | CVE-2007-5294 | Candidate | PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to execute arbitrary PHP code via a URL in the site_absolute_path parameter. | Assigned (20071009) | None (candidate not yet proposed) | View | |
94187 | CVE-2016-7367 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20160909) | None (candidate not yet proposed) | View |
Page 19315 of 20943, showing 5 records out of 104715 total, starting on record 96571, ending on 96575