CVE List

Id CVE No. Status Description Phase Votes Comments Actions
104695  CVE-2017-7875  Candidate  In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free.  Assigned (20170414)  None (candidate not yet proposed)    View
39415  CVE-2009-1980  Candidate  Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.  Assigned (20090608)  None (candidate not yet proposed)    View
39671  CVE-2009-2236  Candidate  SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter. NOTE: some of these details are obtained from third party information.  Assigned (20090627)  None (candidate not yet proposed)    View
39927  CVE-2009-2492  Candidate  Cross-site scripting (XSS) vulnerability in mt-wizard.cgi in Six Apart Movable Type before 4.261 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-2480.  Assigned (20090717)  None (candidate not yet proposed)    View
40183  CVE-2009-2748  Candidate  Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.  Assigned (20090812)  None (candidate not yet proposed)    View

Page 20270 of 20943, showing 5 records out of 104715 total, starting on record 101346, ending on 101350

Actions