CVE List

Id CVE No. Status Description Phase Votes Comments Actions
103411  CVE-2017-6591  Candidate  There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.  Assigned (20170309)  None (candidate not yet proposed)    View
38131  CVE-2009-0696  Candidate  The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5 before 9.5.1-P3, and 9.6 before 9.6.1-P1, when configured as a master server, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an ANY record in the prerequisite section of a crafted dynamic update message, as exploited in the wild in July 2009.  Assigned (20090222)  None (candidate not yet proposed)    View
103667  CVE-2017-6847  Candidate  The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.  Assigned (20170312)  None (candidate not yet proposed)    View
38387  CVE-2009-0952  Candidate  Buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted compressed PSD image.  Assigned (20090318)  None (candidate not yet proposed)    View
103923  CVE-2017-7103  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170317)  None (candidate not yet proposed)    View

Page 19356 of 20943, showing 5 records out of 104715 total, starting on record 96776, ending on 96780

Actions