CVE List

Id CVE No. Status Description Phase Votes Comments Actions
28396  CVE-2007-5039  Candidate  Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation, and (5) NtSetValueKey kernel SSDT hooks.  Assigned (20070923)  None (candidate not yet proposed)    View
93932  CVE-2016-7112  Candidate  The EN100 Ethernet module before 4.29 for Siemens SIPROTEC 4 and SIPROTEC Compact devices allows remote attackers to bypass authentication and obtain administrative access via unspecified HTTP traffic.  Assigned (20160830)  None (candidate not yet proposed)    View
28652  CVE-2007-5295  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in index.php in (a) Wikepage Opus 13 2007.2 and (b) TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the (1) PageContent and (2) PageName parameters.  Assigned (20071009)  None (candidate not yet proposed)    View
94188  CVE-2016-7368  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20160909)  None (candidate not yet proposed)    View
28908  CVE-2007-5551  Candidate  Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer overflow. NOTE: as of 20071016, the only disclosure is a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.  Assigned (20071018)  None (candidate not yet proposed)    View

Page 19384 of 20943, showing 5 records out of 104715 total, starting on record 96916, ending on 96920

Actions