CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 91892 | CVE-2016-5073 | Candidate | CloudView NMS before 2.10a has XSS via SNMP. | Assigned (20160526) | None (candidate not yet proposed) | View | |
| 26612 | CVE-2007-3255 | Candidate | Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via (1) a saved Workflow name or (2) the Content-Type HTTP header. NOTE: item 2 also affects the same version numbers of Xythos Digital Locker (XDL). One or both vectors might also affect Xythos WebFile Server. | Assigned (20070619) | None (candidate not yet proposed) | View | |
| 92148 | CVE-2016-5329 | Candidate | VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors. | Assigned (20160607) | None (candidate not yet proposed) | View | |
| 26868 | CVE-2007-3511 | Candidate | The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field. | Assigned (20070702) | None (candidate not yet proposed) | View | |
| 92404 | CVE-2016-5585 | Candidate | Unspecified vulnerability in the Oracle Interaction Center Intelligence component in Oracle E-Business Suite 12.1.1 through 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors. | Assigned (20160616) | None (candidate not yet proposed) | View |
Page 20028 of 20943, showing 5 records out of 104715 total, starting on record 100136, ending on 100140