CVE List

Id CVE No. Status Description Phase Votes Comments Actions
27895  CVE-2007-4538  Candidate  email_in.pl in Bugzilla 2.23.4 through 3.0.0 allows remote attackers to execute arbitrary commands via the -f (From address) option to the Email::Send::Sendmail function, probably involving shell metacharacters.  Assigned (20070827)  None (candidate not yet proposed)    View
93431  CVE-2016-6611  Candidate  An issue was discovered in phpMyAdmin. A specially crafted database and/or table name can be used to trigger an SQL injection attack through the export functionality. All 4.6.x versions (prior to 4.6.4), 4.4.x versions (prior to 4.4.15.8), and 4.0.x versions (prior to 4.0.10.17) are affected.  Assigned (20160806)  None (candidate not yet proposed)    View
28151  CVE-2007-4794  Candidate  Buffer overflow in fcstat in devices.common.IBM.fc.rte in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long input parameter.  Assigned (20070910)  None (candidate not yet proposed)    View
93687  CVE-2016-6867  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20160818)  None (candidate not yet proposed)    View
28407  CVE-2007-5050  Candidate  Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the q parameter.  Assigned (20070923)  None (candidate not yet proposed)    View

Page 20269 of 20943, showing 5 records out of 104715 total, starting on record 101341, ending on 101345

Actions