CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
76280 | CVE-2014-8979 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20141118) | None (candidate not yet proposed) | View | |
11000 | CVE-2004-2574 | Candidate | Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction. | Assigned (20051128) | None (candidate not yet proposed) | View | |
76536 | CVE-2014-9235 | Candidate | Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) _action parameter to group.php or (2) user.php or the (3) location_id parameter to photos.php in php/. | Assigned (20141203) | None (candidate not yet proposed) | View | |
11256 | CVE-2005-0050 | Candidate | The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked buffer" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the "License Logging Service Vulnerability." | Assigned (20050111) | None (candidate not yet proposed) | View | |
76792 | CVE-2014-9491 | Candidate | The devzvol_readdir function in illumos does not check the return value of a strchr call, which allows remote attackers to cause a denial of service (NULL pointer dereference and panic) via unspecified vectors. | Assigned (20150103) | None (candidate not yet proposed) | View |
Page 20303 of 20943, showing 5 records out of 104715 total, starting on record 101511, ending on 101515