CVE List

Id CVE No. Status Description Phase Votes Comments Actions
91892  CVE-2016-5073  Candidate  CloudView NMS before 2.10a has XSS via SNMP.  Assigned (20160526)  None (candidate not yet proposed)    View
26612  CVE-2007-3255  Candidate  Multiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager (XEDM) before 5.0.25.8, and 6.x before 6.0.46.1, allow remote authenticated users to execute commands as arbitrary users via (1) a saved Workflow name or (2) the Content-Type HTTP header. NOTE: item 2 also affects the same version numbers of Xythos Digital Locker (XDL). One or both vectors might also affect Xythos WebFile Server.  Assigned (20070619)  None (candidate not yet proposed)    View
92148  CVE-2016-5329  Candidate  VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.  Assigned (20160607)  None (candidate not yet proposed)    View
26868  CVE-2007-3511  Candidate  The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for" attribute in a label, which bypasses the focus prevention, as demonstrated by changing focus from a textarea to a file upload field.  Assigned (20070702)  None (candidate not yet proposed)    View
92404  CVE-2016-5585  Candidate  Unspecified vulnerability in the Oracle Interaction Center Intelligence component in Oracle E-Business Suite 12.1.1 through 12.1.3 allows remote attackers to affect confidentiality and integrity via unknown vectors.  Assigned (20160616)  None (candidate not yet proposed)    View

Page 20028 of 20943, showing 5 records out of 104715 total, starting on record 100136, ending on 100140

Actions