CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
95470 | CVE-2016-8650 | Candidate | The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent. | Assigned (20161012) | None (candidate not yet proposed) | View | |
30190 | CVE-2008-0073 | Candidate | Array index error in the sdpplin_parse function in input/libreal/sdpplin.c in xine-lib 1.1.10.1 allows remote RTSP servers to execute arbitrary code via a large streamid SDP parameter. | Assigned (20080103) | None (candidate not yet proposed) | View | |
95726 | CVE-2016-8906 | Candidate | SQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS before 3.3.1 allows remote authenticated attackers to execute arbitrary SQL commands via the orderby parameter. | Assigned (20161024) | None (candidate not yet proposed) | View | |
30446 | CVE-2008-0329 | Candidate | LulieBlog 1.0.1 and 1.0.2 does not restrict access to (1) article_suppr.php, (2) comment_accepter.php, and (3) comment_refuser.php in Admin/, which allows remote attackers to accept comments, delete comments, and delete articles via the id parameter. | Assigned (20080117) | None (candidate not yet proposed) | View | |
95982 | CVE-2016-9162 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20161103) | None (candidate not yet proposed) | View |
Page 19547 of 20943, showing 5 records out of 104715 total, starting on record 97731, ending on 97735