CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
90882 | CVE-2016-4063 | Candidate | Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document. | Assigned (20160422) | None (candidate not yet proposed) | View | |
25602 | CVE-2007-2245 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function. | Assigned (20070425) | None (candidate not yet proposed) | View | |
91138 | CVE-2016-4319 | Candidate | Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings. | Assigned (20160427) | None (candidate not yet proposed) | View | |
25858 | CVE-2007-2501 | Candidate | Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call. | Assigned (20070503) | None (candidate not yet proposed) | View | |
91394 | CVE-2016-4575 | Candidate | Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before UL00C00B361; CherryPlus smartphones with software TL00C00 before TL00C00B553, UL00C00 before UL00C00B553, and TL00MC01 before TL00MC01B553; and RIO smartphones with software AL00C00 before AL00C00B360 allows remote attackers to inject arbitrary web script or HTML via an email message. | Assigned (20160511) | None (candidate not yet proposed) | View |
Page 198 of 20943, showing 5 records out of 104715 total, starting on record 986, ending on 990