CVE List

Id CVE No. Status Description Phase Votes Comments Actions
16628  CVE-2006-0524  Candidate  Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  Assigned (20060202)  None (candidate not yet proposed)    View
82164  CVE-2015-4887  Candidate  Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to ePerformance.  Assigned (20150624)  None (candidate not yet proposed)    View
16884  CVE-2006-0780  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters.  Assigned (20060219)  None (candidate not yet proposed)    View
82420  CVE-2015-5143  Candidate  The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.  Assigned (20150629)  None (candidate not yet proposed)    View
17140  CVE-2006-1036  Candidate  Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."  Assigned (20060307)  None (candidate not yet proposed)    View

Page 19402 of 20943, showing 5 records out of 104715 total, starting on record 97006, ending on 97010

Actions