CVE List

Id CVE No. Status Description Phase Votes Comments Actions
26098  CVE-2007-2741  Candidate  Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC profile in a JPG file.  Assigned (20070517)  None (candidate not yet proposed)    View
91634  CVE-2016-4815  Candidate  Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlier allows remote attackers to read arbitrary files via unspecified vectors.  Assigned (20160517)  None (candidate not yet proposed)    View
26354  CVE-2007-2997  Candidate  ** DISPUTED ** Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL commands via the password field and other unspecified vectors. NOTE: the vendor disputes this issue, stating "We were able to reproduce this sql injection on an old out-of-date demo on the website but not on the released product."  Assigned (20070604)  None (candidate not yet proposed)    View
91890  CVE-2016-5071  Candidate  Sierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application as root.  Assigned (20160526)  None (candidate not yet proposed)    View
26610  CVE-2007-3253  Candidate  Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session.  Assigned (20070618)  None (candidate not yet proposed)    View

Page 19864 of 20943, showing 5 records out of 104715 total, starting on record 99316, ending on 99320

Actions