CVE List

Id CVE No. Status Description Phase Votes Comments Actions
25588  CVE-2007-2231  Candidate  Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.  Assigned (20070425)  None (candidate not yet proposed)    View
91124  CVE-2016-4305  Candidate  A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. A specially crafted native api call can cause a access violation in KLIF kernel driver resulting in local denial of service. An attacker can run program from user-mode to trigger this vulnerability.  Assigned (20160427)  None (candidate not yet proposed)    View
25844  CVE-2007-2487  Candidate  Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287.  Assigned (20070503)  None (candidate not yet proposed)    View
91380  CVE-2016-4561  Candidate  Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message.  Assigned (20160506)  None (candidate not yet proposed)    View
26100  CVE-2007-2743  Candidate  PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the sys[path_addon] parameter.  Assigned (20070517)  None (candidate not yet proposed)    View

Page 19416 of 20943, showing 5 records out of 104715 total, starting on record 97076, ending on 97080

Actions