CVE List

Id CVE No. Status Description Phase Votes Comments Actions
17404  CVE-2006-1300  Candidate  Microsoft .NET framework 2.0 (ASP.NET) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1 allows remote attackers to bypass access restrictions via unspecified "URL paths" that can access Application Folder objects "explicitly by name."  Assigned (20060320)  None (candidate not yet proposed)    View
82940  CVE-2015-5663  Candidate  The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user.  Assigned (20150724)  None (candidate not yet proposed)    View
17660  CVE-2006-1556  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) CatName, (2) CaricatierID, or (3) CatID parameter.  Assigned (20060331)  None (candidate not yet proposed)    View
83196  CVE-2015-5919  Candidate  GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5918.  Assigned (20150806)  None (candidate not yet proposed)    View
17916  CVE-2006-1812  Candidate  phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.  Assigned (20060417)  None (candidate not yet proposed)    View

Page 20040 of 20943, showing 5 records out of 104715 total, starting on record 100196, ending on 100200

Actions