CVE List

Id CVE No. Status Description Phase Votes Comments Actions
90882  CVE-2016-4063  Candidate  Use-after-free vulnerability in Foxit Reader and PhantomPDF before 7.3.4 on Windows allows remote attackers to execute arbitrary code via an object with a revision number of -1 in a PDF document.  Assigned (20160422)  None (candidate not yet proposed)    View
25602  CVE-2007-2245  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the fieldkey parameter to browse_foreigners.php or (2) certain input to the PMA_sanitize function.  Assigned (20070425)  None (candidate not yet proposed)    View
91138  CVE-2016-4319  Candidate  Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.  Assigned (20160427)  None (candidate not yet proposed)    View
25858  CVE-2007-2501  Candidate  Eval injection vulnerability in codepress.html in CodePress before 0.9.4 allows remote attackers to execute arbitrary code via certain input that is used in an eval function call.  Assigned (20070503)  None (candidate not yet proposed)    View
91394  CVE-2016-4575  Candidate  Cross-site scripting (XSS) vulnerability in the email APP in Huawei PLK smartphones with software AL10C00 before AL10C00B211 and AL10C92 before AL10C92B211; ATH smartphones with software AL00C00 before AL00C00B361, CL00C92 before CL00C92B361, TL00HC01 before TL00HC01B361, and UL00C00 before UL00C00B361; CherryPlus smartphones with software TL00C00 before TL00C00B553, UL00C00 before UL00C00B553, and TL00MC01 before TL00MC01B553; and RIO smartphones with software AL00C00 before AL00C00B360 allows remote attackers to inject arbitrary web script or HTML via an email message.  Assigned (20160511)  None (candidate not yet proposed)    View

Page 198 of 20943, showing 5 records out of 104715 total, starting on record 986, ending on 990

Actions