CVE List

Id CVE No. Status Description Phase Votes Comments Actions
25854  CVE-2007-2497  Candidate  RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain .ra file. NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct.  Assigned (20070503)  None (candidate not yet proposed)    View
91390  CVE-2016-4571  Candidate  The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.  Assigned (20160509)  None (candidate not yet proposed)    View
26110  CVE-2007-2753  Candidate  RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/xice.mdb.  Assigned (20070517)  None (candidate not yet proposed)    View
91646  CVE-2016-4827  Candidate  Cross-site scripting (XSS) vulnerability in the Collne Welcart e-Commerce plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-4826.  Assigned (20160517)  None (candidate not yet proposed)    View
26366  CVE-2007-3009  Candidate  Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a "GET %n://localhost:80/" request.  Assigned (20070604)  None (candidate not yet proposed)    View

Page 20212 of 20943, showing 5 records out of 104715 total, starting on record 101056, ending on 101060

Actions