CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 90860 | CVE-2016-4041 | Candidate | Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors. | Assigned (20160419) | None (candidate not yet proposed) | View | |
| 25580 | CVE-2007-2223 | Candidate | Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow. | Assigned (20070424) | None (candidate not yet proposed) | View | |
| 91116 | CVE-2016-4297 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20160427) | None (candidate not yet proposed) | View | |
| 25836 | CVE-2007-2479 | Candidate | Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to obtain potentially sensitive information via long CTCP PING messages that contain UTF-8 characters, which generates a malformed response that is not truncated by a newline, which can cause portions of a server message to be sent to the attacker. | Assigned (20070502) | None (candidate not yet proposed) | View | |
| 91372 | CVE-2016-4553 | Candidate | client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request. | Assigned (20160506) | None (candidate not yet proposed) | View |
Page 19390 of 20943, showing 5 records out of 104715 total, starting on record 96946, ending on 96950
