CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 82421 | CVE-2015-5144 | Candidate | Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1) email message to the EmailValidator, a (2) URL to the URLValidator, or unspecified vectors to the (3) validate_ipv4_address or (4) validate_slug validator. | Assigned (20150629) | None (candidate not yet proposed) | View | |
| 17141 | CVE-2006-1037 | Candidate | SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via uknown attack vectors. | Assigned (20060307) | None (candidate not yet proposed) | View | |
| 82677 | CVE-2015-5400 | Candidate | Squid before 3.5.6 does not properly handle CONNECT method peer responses when configured with cache_peer, which allows remote attackers to bypass intended restrictions and gain access to a backend proxy via a CONNECT request. | Assigned (20150706) | None (candidate not yet proposed) | View | |
| 17397 | CVE-2006-1293 | Candidate | Cross-site scripting (XSS) vulnerability in index.php in Contrexx CMS 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF). | Assigned (20060319) | None (candidate not yet proposed) | View | |
| 82933 | CVE-2015-5656 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20150724) | None (candidate not yet proposed) | View |
Page 20081 of 20943, showing 5 records out of 104715 total, starting on record 100401, ending on 100405
