CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
25854 | CVE-2007-2497 | Candidate | RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain .ra file. NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct. | Assigned (20070503) | None (candidate not yet proposed) | View | |
91390 | CVE-2016-4571 | Candidate | The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file. | Assigned (20160509) | None (candidate not yet proposed) | View | |
26110 | CVE-2007-2753 | Candidate | RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/xice.mdb. | Assigned (20070517) | None (candidate not yet proposed) | View | |
91646 | CVE-2016-4827 | Candidate | Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826. | Assigned (20160517) | None (candidate not yet proposed) | View | |
26366 | CVE-2007-3009 | Candidate | Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request. | Assigned (20070604) | None (candidate not yet proposed) | View |
Page 20212 of 20943, showing 5 records out of 104715 total, starting on record 101056, ending on 101060