CVE List

Id CVE No. Status Description Phase Votes Comments Actions
92406  CVE-2016-5587  Candidate  Unspecified vulnerability in the Oracle Customer Interaction History component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2016-5591 and CVE-2016-5593.  Assigned (20160616)  None (candidate not yet proposed)    View
27126  CVE-2007-3769  Candidate  Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to inject arbitrary web script or HTML via a malformed response without a status code, which is reflected to the user in the resulting error message. NOTE: this can be leveraged for root access via a sequence of steps involving web script that creates a new FTP user account.  Assigned (20070715)  None (candidate not yet proposed)    View
92662  CVE-2016-5842  Candidate  MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.  Assigned (20160623)  None (candidate not yet proposed)    View
27382  CVE-2007-4025  Candidate  Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to obtain JSP source code via unspecified vectors.  Assigned (20070726)  None (candidate not yet proposed)    View
92918  CVE-2016-6098  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20160629)  None (candidate not yet proposed)    View

Page 20188 of 20943, showing 5 records out of 104715 total, starting on record 100936, ending on 100940

Actions