CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 102897 | CVE-2017-6077 | Candidate | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 37617 | CVE-2009-0182 | Candidate | Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line. | Assigned (20090120) | None (candidate not yet proposed) | View | |
| 103153 | CVE-2017-6333 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170226) | None (candidate not yet proposed) | View | |
| 37873 | CVE-2009-0438 | Candidate | IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows allows remote attackers to bypass "Authorization checking" and obtain sensitive information from JSP pages via a crafted request. NOTE: this is probably a duplicate of CVE-2008-5412. | Assigned (20090205) | None (candidate not yet proposed) | View | |
| 103409 | CVE-2017-6589 | Candidate | EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example attack vector is a crafted IMG element in an HTML document. | Assigned (20170309) | None (candidate not yet proposed) | View |
Page 19807 of 20943, showing 5 records out of 104715 total, starting on record 99031, ending on 99035
