CVE List

Id CVE No. Status Description Phase Votes Comments Actions
39159  CVE-2009-1724  Candidate  Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0.2, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to inject arbitrary web script or HTML via vectors related to parent and top objects.  Assigned (20090520)  None (candidate not yet proposed)    View
104695  CVE-2017-7875  Candidate  In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.  Assigned (20170414)  None (candidate not yet proposed)    View
39415  CVE-2009-1980  Candidate  Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.  Assigned (20090608)  None (candidate not yet proposed)    View
39671  CVE-2009-2236  Candidate  SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter. NOTE: some of these details are obtained from third party information.  Assigned (20090627)  None (candidate not yet proposed)    View
39927  CVE-2009-2492  Candidate  Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.  Assigned (20090717)  None (candidate not yet proposed)    View

Page 19676 of 20943, showing 5 records out of 104715 total, starting on record 98376, ending on 98380

Actions