CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
25588 | CVE-2007-2231 | Candidate | Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name. | Assigned (20070425) | None (candidate not yet proposed) | View | |
91124 | CVE-2016-4305 | Candidate | A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF driver. A specially crafted native api call can cause a access violation in KLIF kernel driver resulting in local denial of service. An attacker can run program from user-mode to trigger this vulnerability. | Assigned (20160427) | None (candidate not yet proposed) | View | |
25844 | CVE-2007-2487 | Candidate | Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287. | Assigned (20070503) | None (candidate not yet proposed) | View | |
91380 | CVE-2016-4561 | Candidate | Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki before 3.20160506 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message. | Assigned (20160506) | None (candidate not yet proposed) | View | |
26100 | CVE-2007-2743 | Candidate | PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the sys[path_addon] parameter. | Assigned (20070517) | None (candidate not yet proposed) | View |
Page 19416 of 20943, showing 5 records out of 104715 total, starting on record 97076, ending on 97080