CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
77810 | CVE-2015-0547 | Candidate | The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors. | Assigned (20141217) | None (candidate not yet proposed) | View | |
12530 | CVE-2005-1324 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters. | Assigned (20050427) | None (candidate not yet proposed) | View | |
78066 | CVE-2015-0803 | Candidate | The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element"s attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document. | Assigned (20150107) | None (candidate not yet proposed) | View | |
12786 | CVE-2005-1580 | Candidate | users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code. | Assigned (20050514) | None (candidate not yet proposed) | View | |
78322 | CVE-2015-1045 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20150112) | None (candidate not yet proposed) | View |
Page 19847 of 20943, showing 5 records out of 104715 total, starting on record 99231, ending on 99235